cbcvebase.
CVE-2014-1501
published 2014-03-19

CVE-2014-1501: Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open…

PriorityP429medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
1.57%
72.8th percentile
Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection.

Affected

204 ranges· showing 25
VendorProductVersion rangeFixed in
mozillafirefox<= 27.0.1—
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.