CVE-2017-7762
CVSS v3
7.5
HIGH
EPSS Score
1.9 %
exploit probability, as of 2026-09-25
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox < 54.
Technical details
- Published
- 2018-06-11
Frequently asked questions
What is CVE-2017-7762?
When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox < 54.
Is CVE-2017-7762 actively exploited?
Active exploitation of CVE-2017-7762 has not been confirmed. Its EPSS score was 1.9% on 2026-09-25, the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2017-7762?
CVE-2017-7762 has a CVSS v3 base score of 7.5 (HIGH severity).
Is CVE-2017-7762 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2017 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).