Not rated
CVE-2017-7765 The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the…
Description
The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 54 | earliest → < 54 | 54 |
| Firefox ESR 52.2 | earliest → < 52.2 | 52.2 |
| Thunderbird 52.2 | earliest → < 52.2 | 52.2 |
Other CVEs of Firefox
The 2221 CVEs of Firefox →
CVE-2026-120572
Incorrect boundary conditions in the Layout: Block and Inline component
8.8
High
CVE-2026-118027
Frame poisoning in the Layout component
9.1
Critical
CVE-2026-118026
Invalid pointer in the JavaScript: GC component
8.8
High
CVE-2026-118024
Use-after-free in the Graphics: Text component
8.8
High