Search for vulnerabilities
| Vulnerability ID | VCID-p5g7-qz44-s3gg |
| Aliases |
CVE-2017-5378
|
| Summary | Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object’s address can be discovered through hash codes, and also allows for data leakage of an object’s content using these hash codes. |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| cvssv3 | 7.5 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5378.json |
| epss | 0.01592 | https://api.first.org/data/v1/epss?cve=CVE-2017-5378 |
| cvssv2 | 4.3 | https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml |
| archlinux | Critical | https://security.archlinux.org/AVG-157 |
| archlinux | Critical | https://security.archlinux.org/AVG-158 |
| generic_textual | critical | https://www.mozilla.org/en-US/security/advisories/mfsa2017-01 |
| generic_textual | critical | https://www.mozilla.org/en-US/security/advisories/mfsa2017-02 |
| generic_textual | critical | https://www.mozilla.org/en-US/security/advisories/mfsa2017-03 |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.81965 |
| EPSS Score | 0.01592 |
| Published At | May 29, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-05-29T08:25:56.994194+00:00 | Mozilla Importer | Import | https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2017/mfsa2017-03.yml | 38.6.0 |