---
id: "CVE-2015-4495"
kind: "vulnerability"
aliases: ["CVE-2015-4495"]
title: "The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows\u2026"
severity: "high"
cvss: 8.8
epss: 0.68558
exploited: true
status: "open"
category: "runtime"
products: [{"name": "mozilla firefox", "fixed": ["39.0.3"], "affected": "< 39.0.3", "ecosystem": "vendor"}, {"name": "mozilla firefox", "fixed": ["38.1.1"], "affected": ">= 38.0, < 38.1.1", "ecosystem": "vendor"}, {"name": "mozilla firefox os", "fixed": ["2.2"], "affected": "< 2.2", "ecosystem": "vendor"}, {"name": "oracle solaris", "fixed": [], "affected": "= 11.3", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 12.04", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 14.04", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 15.04", "ecosystem": "vendor"}, {"name": "redhat enterprise linux desktop", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux desktop", "fixed": [], "affected": "= 6.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux desktop", "fixed": [], "affected": "= 7.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux eus", "fixed": [], "affected": "= 6.7", "ecosystem": "vendor"}, {"name": "redhat enterprise linux eus", "fixed": [], "affected": "= 7.1", "ecosystem": "vendor"}, {"name": "redhat enterprise linux eus", "fixed": [], "affected": "= 7.2", "ecosystem": "vendor"}, {"name": "redhat enterprise linux eus", "fixed": [], "affected": "= 7.3", "ecosystem": "vendor"}, {"name": "redhat enterprise linux eus", "fixed": [], "affected": "= 7.4", "ecosystem": "vendor"}, {"name": "redhat enterprise linux eus", "fixed": [], "affected": "= 7.5", "ecosystem": "vendor"}, {"name": "redhat enterprise linux eus", "fixed": [], "affected": "= 7.6", "ecosystem": "vendor"}, {"name": "redhat enterprise linux eus", "fixed": [], "affected": "= 7.7", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server", "fixed": [], "affected": "= 6.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server", "fixed": [], "affected": "= 7.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server aus", "fixed": [], "affected": "= 7.3", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server aus", "fixed": [], "affected": "= 7.4", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server aus", "fixed": [], "affected": "= 7.6", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server aus", "fixed": [], "affected": "= 7.7", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server tus", "fixed": [], "affected": "= 7.3", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server tus", "fixed": [], "affected": "= 7.6", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server tus", "fixed": [], "affected": "= 7.7", "ecosystem": "vendor"}, {"name": "redhat enterprise linux workstation", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux workstation", "fixed": [], "affected": "= 6.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux workstation", "fixed": [], "affected": "= 7.0", "ecosystem": "vendor"}, {"name": "suse linux enterprise debuginfo", "fixed": [], "affected": "= 11", "ecosystem": "vendor"}, {"name": "opensuse", "fixed": [], "affected": "= 13.1", "ecosystem": "vendor"}, {"name": "opensuse", "fixed": [], "affected": "= 13.2", "ecosystem": "vendor"}, {"name": "suse linux enterprise desktop", "fixed": [], "affected": "= 11", "ecosystem": "vendor"}, {"name": "suse linux enterprise desktop", "fixed": [], "affected": "= 12", "ecosystem": "vendor"}, {"name": "suse linux enterprise server", "fixed": [], "affected": "= 11", "ecosystem": "vendor"}, {"name": "suse linux enterprise server", "fixed": [], "affected": "= 12", "ecosystem": "vendor"}, {"name": "suse linux enterprise software development kit", "fixed": [], "affected": "= 11", "ecosystem": "vendor"}, {"name": "suse linux enterprise software development kit", "fixed": [], "affected": "= 12", "ecosystem": "vendor"}, {"name": "Mozilla Firefox", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["desktop-browser", "exploited", "firefox", "linux", "macos", "runtime", "windows"]
not_affected_if: ["unknown"]
published_at: "2015-08-08T00:59:04+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-24T00:09:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4495", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-4495", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4495", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows…

Mozilla Firefox has a security feature bypass that lets a remote attacker get around the Same Origin Policy to read arbitrary local files or gain privileges. It is listed in CISA's known-exploited catalog, so attacks have been seen in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:mozilla firefox affected < 39.0.3 fixed 39.0.3
- vendor:mozilla firefox affected >= 38.0, < 38.1.1 fixed 38.1.1
- vendor:mozilla firefox os affected < 2.2 fixed 2.2
- vendor:oracle solaris affected = 11.3 fixed ?
- vendor:canonical ubuntu linux affected = 12.04 fixed ?
- vendor:canonical ubuntu linux affected = 14.04 fixed ?
- vendor:canonical ubuntu linux affected = 15.04 fixed ?
- vendor:redhat enterprise linux desktop affected = 5.0 fixed ?
- vendor:redhat enterprise linux desktop affected = 6.0 fixed ?
- vendor:redhat enterprise linux desktop affected = 7.0 fixed ?
- vendor:redhat enterprise linux eus affected = 6.7 fixed ?
- vendor:redhat enterprise linux eus affected = 7.1 fixed ?
- vendor:redhat enterprise linux eus affected = 7.2 fixed ?
- vendor:redhat enterprise linux eus affected = 7.3 fixed ?
- vendor:redhat enterprise linux eus affected = 7.4 fixed ?
- vendor:redhat enterprise linux eus affected = 7.5 fixed ?
- vendor:redhat enterprise linux eus affected = 7.6 fixed ?
- vendor:redhat enterprise linux eus affected = 7.7 fixed ?
- vendor:redhat enterprise linux server affected = 5.0 fixed ?
- vendor:redhat enterprise linux server affected = 6.0 fixed ?
- vendor:redhat enterprise linux server affected = 7.0 fixed ?
- vendor:redhat enterprise linux server aus affected = 7.3 fixed ?
- vendor:redhat enterprise linux server aus affected = 7.4 fixed ?
- vendor:redhat enterprise linux server aus affected = 7.6 fixed ?
- vendor:redhat enterprise linux server aus affected = 7.7 fixed ?
- vendor:redhat enterprise linux server tus affected = 7.3 fixed ?
- vendor:redhat enterprise linux server tus affected = 7.6 fixed ?
- vendor:redhat enterprise linux server tus affected = 7.7 fixed ?
- vendor:redhat enterprise linux workstation affected = 5.0 fixed ?
- vendor:redhat enterprise linux workstation affected = 6.0 fixed ?
- vendor:redhat enterprise linux workstation affected = 7.0 fixed ?
- vendor:suse linux enterprise debuginfo affected = 11 fixed ?
- vendor:opensuse affected = 13.1 fixed ?
- vendor:opensuse affected = 13.2 fixed ?
- vendor:suse linux enterprise desktop affected = 11 fixed ?
- vendor:suse linux enterprise desktop affected = 12 fixed ?
- vendor:suse linux enterprise server affected = 11 fixed ?
- vendor:suse linux enterprise server affected = 12 fixed ?
- vendor:suse linux enterprise software development kit affected = 11 fixed ?
- vendor:suse linux enterprise software development kit affected = 12 fixed ?
- vendor:Mozilla Firefox affected ? fixed ?

## How to check

Check the installed Firefox version (Help > About Firefox) against the fixed release in Mozilla's advisory; unknown from the sources which versions are affected.

## Fix

Update Firefox to the latest release per Mozilla's vendor instructions (CISA required action: apply updates).

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4495
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2015-4495
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2015-4495

## From the sources

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_