Every CVE Search/ Get API key

CVE-2013-1737

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird...

5.0 Medium

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.

Exploit likelihood

2.93%Down 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.

Record
CVE-2013-1737
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.

Record
CVE-2013-1737
Updated
2026-11-02
EUVDEUVD-2013-1764 No score

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.

Record
EUVD-2013-1764
Updated
2026-11-03
GitHub AdvisoriesGHSA-cmgg-ggj8-p45q No score

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird...

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.

Record
GHSA-cmgg-ggj8-p45q
Updated
2026-11-02
OSVMGASA-2013-0287 No score

Updated firefox and thunderbird packages fix security vulnerabilities

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox or Thunderbird (CVE-2013-1718, CVE-2013-1722, CVE-2013-1725, CVE-2013-1730, CVE-2013-1732, CVE-2013-1735, CVE-2013-1736).

A flaw was found in the way Firefox and Thunderbird handled certain DOM JavaScript objects. An attacker could use this flaw to make JavaScript client or add-on code make incorrect, security sensitive decisions (CVE-2013-1737).

Record
MGASA-2013-0287
Updated
2026-11-02
OSVMGASA-2013-0329 No score

Updated iceape packages fix many vulnerabilities

Updated iceape packages fix security issues:

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2013-1682)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2013-1683)

Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site. (CVE-2013-1684)

Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site. (CVE-2013-1685)

Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2013-1686)

The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site. (CVE-2013-1687)

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location. (CVE-2013-1690)

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site. (CVE-2013-1692)

The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code. (CVE-2013-1693)

The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag. (CVE-2013-1694)

Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.…

Record
MGASA-2013-0329
Updated
2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10071-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score

seamonkey-2.40-6.1 on GA media

These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10218-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score

MozillaThunderbird-45.5.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10230-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2015:0446-1 No score

Security update for Mozilla Firefox

This update to Firefox 17.0.9esr (bnc#840485) addresses:

* MFSA 2013-91 User-defined properties on DOM proxies get the wrong
  'this' object
      o (CVE-2013-1737)
* MFSA 2013-90 Memory corruption involving scrolling
      o use-after-free in mozilla::layout::ScrollbarActivity
        (CVE-2013-1735)
      o Memory corruption in nsGfxScrollFrameInner::IsLTR()
        (CVE-2013-1736)
* MFSA 2013-89 Buffer overflow with multi-column, lists, and floats
      o buffer overflow at nsFloatManager::GetFlowArea() with multicol,
        list, floats (CVE-2013-1732)
* MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes
      o compartment mismatch in nsXBLBinding::DoInitJSClass
        (CVE-2013-1730)
* MFSA 2013-83 Mozilla Updater does not lock MAR file after signature
  verification
      o MAR signature bypass in Updater could lead to downgrade
        (CVE-2013-1726)
* MFSA 2013-82 Calling scope for new Javascript objects can lead to
  memory corruption
      o ABORT: bad scope for new JSObjects: ReparentWrapper /
        document.open (CVE-2013-1725)
* MFSA 2013-79 Use-after-free in Animation Manager during stylesheet
  cloning
      o Heap-use-after-free in nsAnimationManager::BuildAnimations
        (CVE-2013-1722)
* MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 /
  rv:17.0.9)
      o Memory safety bugs fixed in Firefox 17.0.9 and Firefox 24.0
        (CVE-2013-1718)
* MFSA 2013-65 Buffer underflow when generating CRMF requests
      o ASAN heap-buffer-overflow (read 1) in
        cryptojs_interpret_key_gen_type (CVE-2013-1705)

Security Issue references:

* CVE-2013-1737
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737>
* CVE-2013-1735
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735>
* CVE-2013-1736
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736>
* CVE-2013-1732
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732>
* CVE-2013-1730
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730>
* CVE-2013-1726
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1726>
* CVE-2013-1725
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725>
* CVE-2013-1722
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722>
* CVE-2013-1718
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718>
* CVE-2013-1705
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705>
Record
SUSE-SU-2015:0446-1
Updated
2026-11-02
OSVSUSE-SU-2015:0447-1 No score

Security update for Mozilla Firefox

This update to Firefox 17.0.9esr (bnc#840485) addresses:

* MFSA 2013-91 User-defined properties on DOM proxies get the wrong
  'this' object
      o (CVE-2013-1737)
* MFSA 2013-90 Memory corruption involving scrolling
      o use-after-free in mozilla::layout::ScrollbarActivity
        (CVE-2013-1735)
      o Memory corruption in nsGfxScrollFrameInner::IsLTR()
        (CVE-2013-1736)
* MFSA 2013-89 Buffer overflow with multi-column, lists, and floats
      o buffer overflow at nsFloatManager::GetFlowArea() with multicol,
        list, floats (CVE-2013-1732)
* MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes
      o compartment mismatch in nsXBLBinding::DoInitJSClass
        (CVE-2013-1730)
* MFSA 2013-83 Mozilla Updater does not lock MAR file after signature
  verification
      o MAR signature bypass in Updater could lead to downgrade
        (CVE-2013-1726)
* MFSA 2013-82 Calling scope for new Javascript objects can lead to
  memory corruption
      o ABORT: bad scope for new JSObjects: ReparentWrapper /
        document.open (CVE-2013-1725)
* MFSA 2013-79 Use-after-free in Animation Manager during stylesheet
  cloning
      o Heap-use-after-free in nsAnimationManager::BuildAnimations
        (CVE-2013-1722)
* MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 /
  rv:17.0.9)
      o Memory safety bugs fixed in Firefox 17.0.9 and Firefox 24.0
        (CVE-2013-1718)
* MFSA 2013-65 Buffer underflow when generating CRMF requests
      o ASAN heap-buffer-overflow (read 1) in
        cryptojs_interpret_key_gen_type (CVE-2013-1705)

Security Issue references:

* CVE-2013-1737
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737>
* CVE-2013-1735
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735>
* CVE-2013-1736
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736>
* CVE-2013-1732
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732>
* CVE-2013-1730
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730>
* CVE-2013-1726
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1726>
* CVE-2013-1725
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725>
* CVE-2013-1722
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722>
* CVE-2013-1718
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718>
* CVE-2013-1705
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705>
Record
SUSE-SU-2015:0447-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
iceweasel
Debian:7
From an advisory covering 8 CVEs
 before 17.0.9esr-1~deb7u1, plus listed versions
10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1
Show 40 moreShow less
11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-217.0.8esr-117.0.8esr-1~deb7u117.0.8esr-217.0.8esr-2~deb7u1
17.0.9esr-1~deb7u1
icedove
Debian:7
From an advisory covering 8 CVEs
 before 17.0.9-1~deb7u1, plus listed versions
10.0.12-111.0-116.0.2-117.0-117.0.2-1
Show 7 moreShow less
17.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u1
17.0.9-1~deb7u1
firefox
Mageia:2
From an advisory covering 8 CVEs
 before 17.0.9-1.mga2
17.0.9-1.mga2
firefox-l10n
Mageia:2
From an advisory covering 8 CVEs
 before 17.0.9-1.mga2
17.0.9-1.mga2
thunderbird
Mageia:2
From an advisory covering 8 CVEs
 before 17.0.9-1.mga2
17.0.9-1.mga2
thunderbird-l10n
Mageia:2
From an advisory covering 8 CVEs
 before 17.0.9-1.mga2
17.0.9-1.mga2
firefox
Mageia:3
From an advisory covering 8 CVEs
 before 17.0.9-1.mga3
17.0.9-1.mga3
thunderbird
Mageia:3
From an advisory covering 8 CVEs
 before 17.0.9-1.mga3
17.0.9-1.mga3
thunderbird-l10n
Mageia:3
From an advisory covering 8 CVEs
 before 17.0.9-1.mga3
17.0.9-1.mga3
iceape
Mageia:2
From an advisory covering 55 CVEs
 before 2.22-1.mga2
2.22-1.mga2
Show 37 moreShow less
Affected packages
PackageAffectedFixed
iceape
Mageia:3
From an advisory covering 55 CVEs
 before 2.22-1.mga3
2.22-1.mga3
firefox
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el5_9
0:17.0.9-1.el5_9
firefox-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el5_9
0:17.0.9-1.el5_9
xulrunner
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el5_9
0:17.0.9-1.el5_9
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el5_9
0:17.0.9-1.el5_9
xulrunner-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el5_9
0:17.0.9-1.el5_9
firefox
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
firefox-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
firefox
Red Hat:enterprise_linux:6::computenode
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner
Red Hat:enterprise_linux:6::computenode
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
firefox
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
firefox-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
firefox
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
xulrunner-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
thunderbird
Red Hat:rhel_productivity:5
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el5_9
0:17.0.9-1.el5_9
thunderbird-debuginfo
Red Hat:rhel_productivity:5
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el5_9
0:17.0.9-1.el5_9
thunderbird
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
thunderbird
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
thunderbird
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:17.0.9-1.el6_4
0:17.0.9-1.el6_4
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 899 CVEs
 before 50.1.0-1.1
50.1.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 560 CVEs
 before 45.5.1-1.1
45.5.1-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1737 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published September 18, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.93%, the 87th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 2,015 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open