CVE-2016-5259

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote…

published August 5, 2016

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03259 · 88.3th percentile
Published
2016-08-05T01:00Z
EPSS history
Timeline
  • 05 AUG 01:00Z
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote…
    cvelistv5