Every CVE Search/ Get API key

CVE-2014-1533

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0,...

10.0 HighFix available

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Exploit likelihood

6.12%Down 2.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
CVE-2014-1533
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
CVE-2014-1533
Updated
2026-11-02
EUVDEUVD-2014-1609 No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
EUVD-2014-1609
Updated
2026-11-03
GitHub AdvisoriesGHSA-mxfp-fxv6-wm97 No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0,...

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
GHSA-mxfp-fxv6-wm97
Updated
2026-11-02
OSVMGASA-2014-0260 No score

Updated firefox & thunderbird packages fix multiple security vulnerabilities

Updated firefox and thunderbird packages fix security vulnerabilities:

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it (CVE-2014-1533, CVE-2014-1538, CVE-2014-1541).

Record
MGASA-2014-0260
Updated
2026-11-02
OSVMGASA-2014-0419 No score

Updated iceape package fixes security vulnerabilities

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1533)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1534)

The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. (CVE-2014-1536)

Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2014-1537)

Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2014-1538)

Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. (CVE-2014-1540)

Use-after-free vulnerability in the RefreshDriverTimer::Tick*Driver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content. (CVE-2014-1541)

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate. (CVE-2014-1542)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1547)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2014-1548)

The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering. (CVE-2014-1549)

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering. (CVE-2014-1550)

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization. (CVE-2014-1561)

Use-after-free vulnerability in the nsDocLoader::OnProgress function in…

Record
MGASA-2014-0419
Updated
2026-11-02
Show 7 moreShow less
OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10071-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score

seamonkey-2.40-6.1 on GA media

These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10218-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score

MozillaThunderbird-45.5.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10230-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-1533 No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
UBUNTU-CVE-2014-1533
Updated
2026-11-02
OSVUSN-2243-1 No score

firefox vulnerabilities

Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden, Kyle Huey, Jesse Ruderman, Gregor Wagner, Benoit Jacob and Karl Tomlinson discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1533, CVE-2014-1534)

Abhishek Arya discovered multiple use-after-free and out-of-bounds read issues in Firefox. An attacker could potentially exploit these to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2014-1536, CVE-2014-1537, CVE-2014-1538)

Tyson Smith and Jesse Schwartzentruber discovered a use-after-free in the event listener manager. An attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2014-1540)

A use-after-free was discovered in the SMIL animation controller. An attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2014-1541)

Holger Fuhrmannek discovered a buffer overflow in Web Audio. An attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2014-1542)

Record
USN-2243-1
Updated
2026-11-02
OSVUSN-2250-1 No score

thunderbird vulnerabilities

Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden and Kyle Huey discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1533)

Abhishek Arya discovered multiple use-after-free and out-of-bounds read issues in Thunderbird. If a user had enabled scripting, an attacker could potentially exploit these to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Thunderbird. (CVE-2014-1538)

A use-after-free was discovered in the SMIL animation controller. If a user had enabled scripting, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Thunderbird. (CVE-2014-1541)

Record
USN-2250-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
iceweasel
Debian:7
From an advisory covering 4 CVEs
before 24.6.0esr-1~deb7u1, plus listed versions
10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1
Show 45 moreShow less
11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.10esr-1~deb7u117.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-217.0.8esr-117.0.8esr-1~deb7u117.0.8esr-217.0.8esr-2~deb7u117.0.9esr-1~deb7u118.0-118.0.1-118.0.2-1
24.6.0esr-1~deb7u1
icedove
Debian:7
From an advisory covering 4 CVEs
before 24.6.0-1~deb7u1, plus listed versions
10.0.12-111.0-116.0.2-117.0-117.0.10-1
Show 27 moreShow less
17.0.10-1+powerpcspe117.0.10-1+powerpcspe217.0.10-1~deb7u117.0.2-117.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u117.0.9-117.0.9-1~deb7u117.0.9-224.0-124.0~b3-224.1.1-124.2.0-124.2.0-1+alpha24.2.0-1+powerpcspe124.3.0-124.3.0-224.4.0-124.4.0-1~deb7u124.5.0-124.5.0-1~deb7u124.5.0-2
24.6.0-1~deb7u1
rootcerts
Mageia:3
From an advisory covering 3 CVEs
before 20140401.00-1.mga3
20140401.00-1.mga3
nspr
Mageia:3
From an advisory covering 3 CVEs
before 4.10.6-1.mga3
4.10.6-1.mga3
nss
Mageia:3
From an advisory covering 3 CVEs
before 3.16.1-1.mga3
3.16.1-1.mga3
firefox
Mageia:3
From an advisory covering 3 CVEs
before 24.6.0-1.mga3
24.6.0-1.mga3
firefox-l10n
Mageia:3
From an advisory covering 3 CVEs
before 24.6.0-1.mga3
24.6.0-1.mga3
thunderbird
Mageia:3
From an advisory covering 3 CVEs
before 24.6.0-1.mga3
24.6.0-1.mga3
thunderbird-l10n
Mageia:3
From an advisory covering 3 CVEs
before 24.6.0-1.mga3
24.6.0-1.mga3
rootcerts
Mageia:4
From an advisory covering 3 CVEs
before 20140401.00-1.mga4
20140401.00-1.mga4
Show 55 moreShow less
Affected packages
PackageAffectedFixed
nspr
Mageia:4
From an advisory covering 3 CVEs
before 4.10.6-1.mga4
4.10.6-1.mga4
nss
Mageia:4
From an advisory covering 3 CVEs
before 3.16.1-1.mga4
3.16.1-1.mga4
firefox
Mageia:4
From an advisory covering 3 CVEs
before 24.6.0-1.mga4
24.6.0-1.mga4
firefox-l10n
Mageia:4
From an advisory covering 3 CVEs
before 24.6.0-1.mga4
24.6.0-1.mga4
thunderbird
Mageia:4
From an advisory covering 3 CVEs
before 24.6.0-1.mga4
24.6.0-1.mga4
thunderbird-l10n
Mageia:4
From an advisory covering 3 CVEs
before 24.6.0-1.mga4
24.6.0-1.mga4
iceape
Mageia:3
From an advisory covering 39 CVEs
before 2.30-1.mga3
2.30-1.mga3
iceape
Mageia:4
From an advisory covering 39 CVEs
before 2.30-1.mga4
2.30-1.mga4
firefox
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el5_10
0:24.6.0-1.el5_10
firefox-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el5_10
0:24.6.0-1.el5_10
firefox
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el5_10
0:24.6.0-1.el5_10
firefox-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el5_10
0:24.6.0-1.el5_10
firefox
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
firefox-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
firefox
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
firefox-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
firefox
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
xulrunner-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el7_0
0:24.6.0-1.el7_0
thunderbird
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el5_10
0:24.6.0-1.el5_10
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el5_10
0:24.6.0-1.el5_10
thunderbird
Red Hat:rhel_productivity:5
From an advisory covering 3 CVEs
before 0:24.6.0-1.el5_10
0:24.6.0-1.el5_10
thunderbird-debuginfo
Red Hat:rhel_productivity:5
From an advisory covering 3 CVEs
before 0:24.6.0-1.el5_10
0:24.6.0-1.el5_10
thunderbird
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
thunderbird
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
thunderbird
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:24.6.0-1.el6_5
0:24.6.0-1.el6_5
firefox
Ubuntu:14.04:LTS
before 30.0+build1-0ubuntu0.14.04.3, plus listed versions
24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu128.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.2
30.0+build1-0ubuntu0.14.04.3
thunderbird
Ubuntu:14.04:LTS
before 1:24.6.0+build1-0ubuntu0.14.04.1, plus listed versions
1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu11:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.1
1:24.6.0+build1-0ubuntu0.14.04.1
firefox
Ubuntu:14.04:LTS
From an advisory covering 8 CVEs
before 30.0+build1-0ubuntu0.14.04.3, plus listed versions
24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu128.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.2
30.0+build1-0ubuntu0.14.04.3
thunderbird
Ubuntu:14.04:LTS
From an advisory covering 3 CVEs
before 1:24.6.0+build1-0ubuntu0.14.04.1, plus listed versions
1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu11:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.1
1:24.6.0+build1-0ubuntu0.14.04.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 899 CVEs
before 50.1.0-1.1
50.1.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 560 CVEs
before 45.5.1-1.1
45.5.1-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-1533 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published June 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.12%, the 93rd percentile. Fixed in firefox 30.0+build1-0ubuntu0.14.04.3.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 25 versions, 2,009 references and the rest of 1 source description. The JSON record has them.

MoveEnter Open