CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is…

published June 13, 2016

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02771 · 86.1th percentile
Published
2016-06-13T10:00Z
EPSS history
Timeline
  • 13 JUN 10:00Z
    Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is…
    cvelistv5