CVE-2018-5179

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 60 Google Chrome (affected versions not specified)

Description The issue allows a service worker to run perpetually by sending the activate event on itself periodically. This enables the service worker to monitor user activity. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. The service worker can send the activate event on itself periodically, allowing it to monitor activity by users.

Recommendations For Firefox versions prior to 60, update to version 60 or later to resolve the issue. For Google Chrome, at the moment, there is no information about a newer version that contains a fix for this vulnerability.