CVE-2017-7836

CVE-2017-7836 describes a local privilege escalation vulnerability in Firefox versions prior to 57 on OS X and Linux systems. The "pingsender" executable, part of the Firefox Health Report, dynamically loads libcurl, which an attacker with local system access could replace with malicious code. This allows the attacker's code to execute with Firefox's privileges, leading to high impact on confidentiality, integrity, and availability. Despite a high CVSS score of 7.8, there is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.