CVE-2016-5250 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls.