CVE-2016-1942

—

CVSS 3.0

7.4 high

EPSS

2%p77

Published

Jan 31, 2016 (Jan 31, 2016)

Modified

Jun 17, 2026

Description

Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.

Vendors: opensuse mozilla
Products: leap, opensuse, firefox
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.