Every CVE Search/ Get API key

CVE-2017-7809

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...

9.8 CriticalFix available

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.59%Up 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Record
CVE-2017-7809
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Record
CVE-2017-7809
Updated
2026-11-02
EUVDEUVD-2017-16784 No score

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Record
EUVD-2017-16784
Updated
2026-11-03
GitHub AdvisoriesGHSA-86cv-v7jv-38f6 9.8

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Record
GHSA-86cv-v7jv-38f6
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 9.8

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Record
CVE-2017-7809
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-7809 9.8

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Record
DEBIAN-CVE-2017-7809
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2017:2456 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2017:2456
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:2534 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2017:2534
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-7809 9.8

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Record
UBUNTU-CVE-2017-7809
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2017-0268 No score

Updated firefox packages fix security vulnerabilities

Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox (CVE-2017-7779, CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803).

Record
MGASA-2017-0268
Updated
2026-11-02
OSVMGASA-2017-0303 No score

Updated thunderbird packages fix security vulnerabilities

Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird (CVE-2017-7779, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803).

Record
MGASA-2017-0303
Updated
2026-11-02
OSVMGASA-2018-0018 No score

Updated iceape packages fix security vulnerabilities

Updated iceape packages include security fixes from upstream Seamonkey and Firefox:

Multiple flaws were found in the way Iceape 2.48 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose sensitive information. (CVE-2016-10196,CVE-2017-5398,CVE-2017-5399, CVE-2017-5400,CVE-2017-5401,CVE-2017-5402,CVE-2017-5403,CVE-2017-5404, CVE-2017-5405,CVE-2017-5406,CVE-2017-5407,CVE-2017-5409,CVE-2017-5410, CVE-2017-5411,CVE-2017-5408,CVE-2017-5412,CVE-2017-5413,CVE-2017-5414, CVE-2017-5415,CVE-2017-5416,CVE-2017-5417,CVE-2017-5425,CVE-2017-5426, CVE-2017-5427,CVE-2017-5418,CVE-2017-5419,CVE-2017-5420,CVE-2017-5421, CVE-2017-5422,CVE-2017-5429,CVE-2017-5430,CVE-2017-5432,CVE-2017-5433, CVE-2017-5434,CVE-2017-5435,CVE-2017-5436,CVE-2017-5438,CVE-2017-5439, CVE-2017-5440,CVE-2017-5441,CVE-2017-5442,CVE-2017-5443,CVE-2017-5444, CVE-2017-5445,CVE-2017-5446,CVE-2017-5447,CVE-2017-5448,CVE-2017-5449, CVE-2017-5451,CVE-2017-5454,CVE-2017-5455,CVE-2017-5456,CVE-2017-5459, CVE-2017-5460,CVE-2017-5461,CVE-2017-5462,CVE-2017-5464,CVE-2017-5465, CVE-2017-5466,CVE-2017-5467,CVE-2017-5469,CVE-2017-5470,CVE-2017-5472, CVE-2017-7749,CVE-2017-7750,CVE-2017-7751,CVE-2017-7752,CVE-2017-7753, CVE-2017-7754,CVE-2017-7755,CVE-2017-7756,CVE-2017-7757,CVE-2017-7758, CVE-2017-7760,CVE-2017-7761,CVE-2017-7763,CVE-2017-7764,CVE-2017-7765, CVE-2017-7766,CVE-2017-7767,CVE-2017-7768,CVE-2017-7778,CVE-2017-7779, CVE-2017-7782,CVE-2017-7784,CVE-2017-7785,CVE-2017-7786,CVE-2017-7787, CVE-2017-7791,CVE-2017-7792,CVE-2017-7793,CVE-2017-7798,CVE-2017-7800, CVE-2017-7801,CVE-2017-7802,CVE-2017-7803,CVE-2017-7804,CVE-2017-7805, CVE-2017-7807,CVE-2017-7809,CVE-2017-7810,CVE-2017-7814,CVE-2017-7818, CVE-2017-7819,CVE-2017-7823,CVE-2017-7824,CVE-2017-7825,CVE-2017-7826, CVE-2017-7828,CVE-2017-7830,CVE-2017-7843,CVE-2017-7845)

Record
MGASA-2018-0018
Updated
2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score

MozillaFirefox-92.0-1.2 on GA media

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10600-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVUSN-3391-1 No score

firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting (XSS) attacks, bypass sandbox restrictions, obtain sensitive information, spoof the origin of modal alerts, bypass same origin restrictions, read uninitialized memory, cause a denial of service via program crash or hang, or execute arbitrary code. (CVE-2017-7753, CVE-2017-7779, CVE-2017-7780, CVE-2017-7781, CVE-2017-7783, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7788, CVE-2017-7789, CVE-2017-7791, CVE-2017-7792, CVE-2017-7794, CVE-2017-7797, CVE-2017-7798, CVE-2017-7799, CVE-2017-7800, CVE-2017-7801, CVE-2017-7802, CVE-2017-7803, CVE-2017-7806, CVE-2017-7807, CVE-2017-7808, CVE-2017-7809)

Record
USN-3391-1
Updated
2026-11-02
OSVUSN-3416-1 No score

thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to bypass same-origin restrictions, bypass CSP restrictions, obtain sensitive information, spoof the origin of modal alerts, cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-7753, CVE-2017-7779, CVE-2017-7784, CVE-2017-7785, CVE-2017-7787, CVE-2017-7791, CVE-2017-7792, CVE-2017-7800, CVE-2017-7801, CVE-2017-7802, CVE-2017-7803, CVE-2017-7807, CVE-2017-7809)

A buffer overflow was discovered when displaying SVG content in some circumstances. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-7786)

Record
USN-3416-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox-esr
Debian:12
 before 52.3.0esr-1
52.3.0esr-1
firefox-esr
Debian:13
 before 52.3.0esr-1
52.3.0esr-1
firefox-esr
Debian:14
 before 52.3.0esr-1
52.3.0esr-1
firefox-esr
Debian:7
 before 52.3.0esr-1~deb7u1, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 43 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-2
52.3.0esr-1~deb7u1
icedove
Debian:7
 before 1:52.3.0-4~deb7u1, plus listed versions
10.0.12-111.0-116.0.2-117.0-117.0.10-1
Show 45 moreShow less
17.0.10-1+powerpcspe117.0.10-1+powerpcspe217.0.10-1~deb7u117.0.2-117.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u117.0.9-117.0.9-1~deb7u117.0.9-21:45.0~b4-11:45.0~b4-21:45.1.0-11:45.1.0-1~deb7u11:45.1.0-1~deb8u11:45.2.0-11:45.2.0-1~deb8u11:45.2.0-21:45.2.0-2~deb7u11:45.2.0-31:45.2.0-41:45.2~b1-11:45.3.0-11:45.3.0-1~deb7u11:45.3.0-1~deb8u11:45.4.0-11:45.4.0-1~deb7u11:45.4.0-1~deb8u11:45.5.0-11:45.5.1-11:45.5.1-1~deb7u11:45.5.1-1~deb8u11:45.6.0-11:45.6.0-1~deb8u11:45.6.0-21:45.6.0-2~deb7u11:45.6.0-31:45.7.1-11:45.7.1-21:45.8.0-11:45.8.0-2
1:52.3.0-4~deb7u1
firefox-esr
Debian:8
 before 52.3.0esr-1~deb8u2, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 45 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-1~deb7u152.3.0esr-1~deb8u1
52.3.0esr-1~deb8u2
firefox-esr
Debian:9
 before 52.3.0esr-1~deb9u1, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 8 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u2
52.3.0esr-1~deb9u1
icedove
Debian:8
 before 1:52.3.0-4~deb8u2, plus listed versions
1:45.0~b4-11:45.0~b4-21:45.1.0-11:45.1.0-1~deb7u11:45.1.0-1~deb8u1
Show 45 moreShow less
1:45.2.0-11:45.2.0-1~deb8u11:45.2.0-21:45.2.0-2~deb7u11:45.2.0-31:45.2.0-41:45.2~b1-11:45.3.0-11:45.3.0-1~deb7u11:45.3.0-1~deb8u11:45.4.0-11:45.4.0-1~deb7u11:45.4.0-1~deb8u11:45.5.0-11:45.5.1-11:45.5.1-1~deb7u11:45.5.1-1~deb8u11:45.6.0-11:45.6.0-1~deb8u11:45.6.0-21:45.6.0-2~deb7u11:45.6.0-31:45.7.1-11:45.7.1-21:45.8.0-11:45.8.0-21:45.8.0-31:45.8.0-3+m68k1:45.8.0-3+sparc641:45.8.0-3~deb7u11:45.8.0-3~deb8u11:52.1.1-11:52.2.0-11:52.2.1-11:52.2.1-1~deb7u11:52.2.1-21:52.2.1-31:52.2.1-41:52.2.1-4~deb8u11:52.2.1-4~deb9u11:52.2.1-51:52.3.0-11:52.3.0-21:52.3.0-31:52.3.0-4~deb7u1
1:52.3.0-4~deb8u2
icedove
Debian:9
 before 1:52.3.0-4~deb9u1, plus listed versions
1:45.8.0-31:45.8.0-3+m68k1:45.8.0-3+sparc641:52.1.1-11:52.2.0-1
Show 15 moreShow less
1:52.2.1-11:52.2.1-1~deb7u11:52.2.1-21:52.2.1-31:52.2.1-41:52.2.1-4~deb8u11:52.2.1-4~deb9u11:52.2.1-51:52.3.0-11:52.3.0-21:52.3.0-31:52.3.0-4~deb7u11:52.3.0-4~deb7u21:52.3.0-4~deb8u11:52.3.0-4~deb8u2
1:52.3.0-4~deb9u1
rootcerts
Mageia:5
 before 20170718.00-1.mga5
20170718.00-1.mga5
Show 48 moreShow less
Affected packages
PackageAffectedFixed
nspr
Mageia:5
 before 4.16-1.mga5
4.16-1.mga5
nss
Mageia:5
 before 3.28.5-1.1.mga5
3.28.5-1.1.mga5
firefox
Mageia:5
 before 52.3.0-1.mga5
52.3.0-1.mga5
firefox-l10n
Mageia:5
 before 52.3.0-1.mga5
52.3.0-1.mga5
rootcerts
Mageia:6
 before 20170718.00-1.mga6
20170718.00-1.mga6
nspr
Mageia:6
 before 4.16-1.mga6
4.16-1.mga6
nss
Mageia:6
 before 3.28.5-1.1.mga6
3.28.5-1.1.mga6
firefox
Mageia:6
 before 52.3.0-1.mga6
52.3.0-1.mga6
firefox-l10n
Mageia:6
 before 52.3.0-1.mga6
52.3.0-1.mga6
thunderbird
Mageia:5
 before 52.3.0-1.mga5
52.3.0-1.mga5
thunderbird-l10n
Mageia:5
 before 52.3.0-1.mga5
52.3.0-1.mga5
thunderbird
Mageia:6
 before 52.3.0-1.mga6
52.3.0-1.mga6
thunderbird-l10n
Mageia:6
 before 52.3.0-1.mga6
52.3.0-1.mga6
iceape
Mageia:5
 before 2.49.1-3.mga5
2.49.1-3.mga5
iceape
Mageia:6
 before 2.49.1-3.mga6
2.49.1-3.mga6
firefox
Red Hat:enterprise_linux:6::client
 before 0:52.3.0-3.el6_9
0:52.3.0-3.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:52.3.0-3.el6_9
0:52.3.0-3.el6_9
firefox
Red Hat:enterprise_linux:6::computenode
 before 0:52.3.0-3.el6_9
0:52.3.0-3.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:52.3.0-3.el6_9
0:52.3.0-3.el6_9
firefox
Red Hat:enterprise_linux:6::server
 before 0:52.3.0-3.el6_9
0:52.3.0-3.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:52.3.0-3.el6_9
0:52.3.0-3.el6_9
firefox
Red Hat:enterprise_linux:6::workstation
 before 0:52.3.0-3.el6_9
0:52.3.0-3.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:52.3.0-3.el6_9
0:52.3.0-3.el6_9
firefox
Red Hat:enterprise_linux:7::client
 before 0:52.3.0-2.el7_4
0:52.3.0-2.el7_4
firefox-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:52.3.0-2.el7_4
0:52.3.0-2.el7_4
firefox
Red Hat:enterprise_linux:7::server
 before 0:52.3.0-2.el7_4
0:52.3.0-2.el7_4
firefox-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:52.3.0-2.el7_4
0:52.3.0-2.el7_4
firefox
Red Hat:enterprise_linux:7::workstation
 before 0:52.3.0-2.el7_4
0:52.3.0-2.el7_4
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:52.3.0-2.el7_4
0:52.3.0-2.el7_4
thunderbird
Red Hat:enterprise_linux:6::client
 before 0:52.3.0-1.el6_9
0:52.3.0-1.el6_9
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:52.3.0-1.el6_9
0:52.3.0-1.el6_9
thunderbird
Red Hat:enterprise_linux:6::server
 before 0:52.3.0-1.el6_9
0:52.3.0-1.el6_9
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:52.3.0-1.el6_9
0:52.3.0-1.el6_9
thunderbird
Red Hat:enterprise_linux:6::workstation
 before 0:52.3.0-1.el6_9
0:52.3.0-1.el6_9
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:52.3.0-1.el6_9
0:52.3.0-1.el6_9
thunderbird
Red Hat:enterprise_linux:7::client
 before 0:52.3.0-1.el7_4
0:52.3.0-1.el7_4
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:52.3.0-1.el7_4
0:52.3.0-1.el7_4
thunderbird
Red Hat:enterprise_linux:7::server
 before 0:52.3.0-1.el7_4
0:52.3.0-1.el7_4
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:52.3.0-1.el7_4
0:52.3.0-1.el7_4
thunderbird
Red Hat:enterprise_linux:7::workstation
 before 0:52.3.0-1.el7_4
0:52.3.0-1.el7_4
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:52.3.0-1.el7_4
0:52.3.0-1.el7_4
firefox
Ubuntu:14.04:LTS
 before 55.0.1+build2-0ubuntu0.14.04.2, plus listed versions
24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1
Show 45 moreShow less
28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.132.0.3+build1-0ubuntu0.14.04.133.0+build2-0ubuntu0.14.04.134.0+build2-0ubuntu0.14.04.135.0+build3-0ubuntu0.14.04.235.0.1+build1-0ubuntu0.14.04.136.0+build2-0ubuntu0.14.04.436.0.1+build2-0ubuntu0.14.04.136.0.4+build1-0ubuntu0.14.04.137.0+build2-0ubuntu0.14.04.137.0.1+build1-0ubuntu0.14.04.137.0.2+build1-0ubuntu0.14.04.138.0+build3-0ubuntu0.14.04.139.0+build5-0ubuntu0.14.04.139.0.3+build2-0ubuntu0.14.04.140.0+build4-0ubuntu0.14.04.140.0+build4-0ubuntu0.14.04.440.0.3+build1-0ubuntu0.14.04.141.0+build3-0ubuntu0.14.04.141.0.1+build2-0ubuntu0.14.04.141.0.2+build2-0ubuntu0.14.04.142.0+build2-0ubuntu0.14.04.143.0+build1-0ubuntu0.14.04.143.0.4+build3-0ubuntu0.14.04.144.0+build3-0ubuntu0.14.04.144.0.1+build2-0ubuntu0.14.04.144.0.2+build1-0ubuntu0.14.04.145.0+build2-0ubuntu0.14.04.145.0.1+build1-0ubuntu0.14.04.245.0.2+build1-0ubuntu0.14.04.146.0+build5-0ubuntu0.14.04.246.0.1+build1-0ubuntu0.14.04.347.0+build3-0ubuntu0.14.04.148.0+build2-0ubuntu0.14.04.149.0+build4-0ubuntu0.14.04.149.0.2+build2-0ubuntu0.14.04.150.0+build2-0ubuntu0.14.04.250.0.2+build1-0ubuntu0.14.04.150.1.0+build2-0ubuntu0.14.04.151.0.1+build2-0ubuntu0.14.04.151.0.1+build2-0ubuntu0.14.04.2
55.0.1+build2-0ubuntu0.14.04.2
thunderbird
Ubuntu:14.04:LTS
 before 1:52.3.0+build1-0ubuntu0.14.04.1, plus listed versions
1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1
Show 28 moreShow less
1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.11:31.2.0+build2-0ubuntu0.14.04.11:31.3.0+build1-0ubuntu0.14.04.11:31.4.0+build1-0ubuntu0.14.04.11:31.5.0+build1-0ubuntu0.14.04.11:31.6.0+build1-0ubuntu0.14.04.11:31.7.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.11:38.2.0+build1-0ubuntu0.14.04.11:38.3.0+build1-0ubuntu0.14.04.11:38.4.0+build3-0ubuntu0.14.04.11:38.5.1+build2-0ubuntu0.14.04.11:38.6.0+build1-0ubuntu0.14.04.11:38.7.2+build1-0ubuntu0.14.04.11:38.8.0+build1-0ubuntu0.14.04.11:45.2.0+build1-0ubuntu0.14.04.31:45.3.0+build1-0ubuntu0.14.04.41:45.4.0+build1-0ubuntu0.14.04.11:45.5.1+build1-0ubuntu0.14.04.11:45.7.0+build1-0ubuntu0.14.04.11:45.8.0+build1-0ubuntu0.14.04.11:52.1.1+build1-0ubuntu0.14.04.11:52.2.1+build1-0ubuntu0.14.04.1
1:52.3.0+build1-0ubuntu0.14.04.1
firefox
Ubuntu:16.04:LTS
 before 55.0.1+build2-0ubuntu0.16.04.2, plus listed versions
41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1
Show 21 moreShow less
45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.1
55.0.1+build2-0ubuntu0.16.04.2
thunderbird
Ubuntu:16.04:LTS
 before 1:52.3.0+build1-0ubuntu0.16.04.1, plus listed versions
1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.11:38.8.0+build1-0ubuntu0.16.04.1
Show 8 moreShow less
1:45.2.0+build1-0ubuntu0.16.04.11:45.3.0+build1-0ubuntu0.16.04.21:45.4.0+build1-0ubuntu0.16.04.11:45.5.1+build1-0ubuntu0.16.04.11:45.7.0+build1-0ubuntu0.16.04.11:45.8.0+build1-0ubuntu0.16.04.11:52.1.1+build1-0ubuntu0.16.04.11:52.2.1+build1-0ubuntu0.16.04.1
1:52.3.0+build1-0ubuntu0.16.04.1
thunderbird
Ubuntu:18.04:LTS
 before 1:52.4.0+build1-0ubuntu2
1:52.4.0+build1-0ubuntu2
MozillaFirefox
openSUSE:Tumbleweed
 before 92.0-1.2
92.0-1.2
firefox-esr
openSUSE:Tumbleweed
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7809 is a critical vulnerability (CVSS 9.8) in Mozilla Firefox, published August 10, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.59%, the 85th percentile. Fixed in firefox-esr 52.3.0esr-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 158 versions and 1,780 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open