CVE-2018-12363

critical
Published — · Modified —
CVSS v3
CVSS v2
VIR risk
9.5

Description

A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2018-12363

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2018-12363.html

vendor Authored 2026-05-27

Vendor advisory: arch — https://security.archlinux.org/ASA-201806-14

vendor Authored 2026-05-27

Vendor advisory: arch — https://security.archlinux.org/ASA-201807-4

OS impact

OSVersionStatusFixed in
arch archfixed52.9.1-1
suse slesaffected
debian debiansidfixed61.0-1
debian debianbookwormfixed52.9.0esr-1
debian debianbullseyefixed52.9.0esr-1
debian debianforkyfixed52.9.0esr-1
debian debiantrixiefixed52.9.0esr-1

References

Verify integrity in audit chain (admin only). AS-IS.