CVE-2016-2813 in Firefoxinfo

Summary

Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsible

Reservation

03/01/2016

Disclosure

04/30/2016

Entries

VDB-82974

CPE

ready

CVSS

7.7

EPSS

0.00472

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!