Search for vulnerabilities
Vulnerability details: VCID-pujn-ybay-m7gw
Vulnerability ID VCID-pujn-ybay-m7gw
Aliases CVE-2015-0818
Summary Security researcher Mariusz Mlynski reported, through HP Zero Day Initiative's Pwn2Own contest, a method to run arbitrary scripts in a privileged context. This bypassed the same-origin policy protections by using a flaw in the processing of SVG format content navigation. An incomplete version of this fix was shipped in Firefox 36.0.3 and Firefox ESR 31.5.2.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
epss 0.01278 https://api.first.org/data/v1/epss?cve=CVE-2015-0818
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2015-28
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0818.json
https://api.first.org/data/v1/epss?cve=CVE-2015-0818
1204363 https://bugzilla.redhat.com/show_bug.cgi?id=1204363
CVE-2015-0818 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0818
mfsa2015-28 https://www.mozilla.org/en-US/security/advisories/mfsa2015-28
RHSA-2015:0718 https://access.redhat.com/errata/RHSA-2015:0718
USN-2538-1 https://usn.ubuntu.com/2538-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.78719
EPSS Score 0.01278
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:54.989435+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-28.md 37.0.0