CVE-2016-9072

—

CVSS 3.0

7.5 high

EPSS

1%p69

Published

Jun 11, 2018 (Jun 11, 2018)

Modified

Jun 17, 2026

Description

When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note: This issue only affects 64-bit Windows. 32-bit Windows and other operating systems are unaffected. This vulnerability affects Firefox < 50.

Vendors: mozilla
Products: firefox
Weakness: CWE-254
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.