CVE-2018-5110 Other in Firefox

Medium 5.3 Published Updated

A UI rendering flaw in Firefox on OS X causes the cursor to become temporarily invisible when toggled via script, potentially confusing users.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2018-5110?

CVE-2018-5110 is a medium-severity vulnerability in Mozilla Firefox, published on 11 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible within Firefox. Note: This vulnerability only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 58.

Weakness: CWE-20

Which versions are affected by CVE-2018-5110?

It affects 1 product.

Products include Mozilla Firefox.

How do I fix CVE-2018-5110?

Upgrade to a fixed version.

Is CVE-2018-5110 being exploited?

There is no known exploitation of CVE-2018-5110 in the wild and no public exploit code.

All Mozilla Firefox vulnerabilities

Sources

Also known as GHSA-q5wx-5wj5-v2g9.

Is CVE-2018-5110 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free