CVE-2018-12368

CVE-2018-12368 describes a vulnerability in Windows 10 where executable files with the SettingContent-ms extension, even if downloaded from the internet and bearing the "Mark of the Web," are opened without user warning, potentially leading to the execution of unwanted code. This impacts Mozilla Firefox, Firefox ESR, and Thunderbird versions prior to 61, 60.1, and 60 respectively, on Windows 10 systems. With a CVSS score of 8.1 (HIGH), the vulnerability has a network attack vector and high impact on confidentiality, integrity, and availability, despite high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.