CVE-2017-5386

CVE-2017-5386 describes a vulnerability in Firefox ESR versions prior to 45.7 and Firefox versions prior to 51, where WebExtension scripts could leverage the "data:" protocol to interfere with other extensions using the same protocol. This could lead to unauthorized data disclosure or privilege escalation within affected extensions. The vulnerability has a CVSS score of 7.3 (High), indicating a network-based attack with low complexity, potentially impacting confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.