Every CVE Search/ Get API key

CVE-2010-3765

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and...

9.3 HighIn KEVPublic exploitFix available

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Exploit likelihood

83.2%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List 9.8

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Record
CVE-2010-3765
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
EUVDEUVD-2010-3744 9.8

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Record
EUVD-2010-3744
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-cmrc-q43h-xrrq 9.8

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and...

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Record
GHSA-cmrc-q43h-xrrq
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
CISA KEV No score

Mozilla Multiple Products Remote Code Execution Vulnerability

Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.

Record
CVE-2010-3765
Updated
2026-11-02
NVD 9.8

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Record
CVE-2010-3765
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10071-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score

seamonkey-2.40-6.1 on GA media

These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10218-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score

MozillaThunderbird-45.5.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10230-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xulrunner
Debian:5.0
 before 1.9.0.19-6, plus listed versions
1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1
Show 20 moreShow less
1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.16-11.9.0.18-11.9.0.19-11.9.0.19-21.9.0.19-31.9.0.19-41.9.0.19-51.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1
1.9.0.19-6
firefox
Red Hat:enterprise_linux:4::as
 before 0:3.6.11-4.el4_8
0:3.6.11-4.el4_8
firefox-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:3.6.11-4.el4_8
0:3.6.11-4.el4_8
firefox
Red Hat:enterprise_linux:4::desktop
 before 0:3.6.11-4.el4_8
0:3.6.11-4.el4_8
firefox-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:3.6.11-4.el4_8
0:3.6.11-4.el4_8
firefox
Red Hat:enterprise_linux:4::es
 before 0:3.6.11-4.el4_8
0:3.6.11-4.el4_8
firefox-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:3.6.11-4.el4_8
0:3.6.11-4.el4_8
firefox
Red Hat:enterprise_linux:4::ws
 before 0:3.6.11-4.el4_8
0:3.6.11-4.el4_8
firefox-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:3.6.11-4.el4_8
0:3.6.11-4.el4_8
xulrunner
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.2.11-4.el5_5
0:1.9.2.11-4.el5_5
Show 120 moreShow less
Affected packages
PackageAffectedFixed
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.2.11-4.el5_5
0:1.9.2.11-4.el5_5
xulrunner-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.2.11-4.el5_5
0:1.9.2.11-4.el5_5
xulrunner
Red Hat:enterprise_linux:5::client
 before 0:1.9.2.11-4.el5_5
0:1.9.2.11-4.el5_5
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.9.2.11-4.el5_5
0:1.9.2.11-4.el5_5
xulrunner
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.11-4.el5_5
0:1.9.2.11-4.el5_5
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.11-4.el5_5
0:1.9.2.11-4.el5_5
xulrunner-devel
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.11-4.el5_5
0:1.9.2.11-4.el5_5
seamonkey
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-chat
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-devel
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-mail
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nss
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::as
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-chat
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-devel
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-mail
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nss
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-chat
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-devel
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-mail
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nss
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::es
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-chat
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-devel
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-mail
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nss
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::ws
 before 0:1.0.9-0.62.el3
0:1.0.9-0.62.el3
seamonkey
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-chat
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-devel
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-js-debugger
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-mail
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-chat
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-devel
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-js-debugger
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-mail
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-chat
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-devel
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-js-debugger
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-mail
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-chat
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-devel
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-js-debugger
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
seamonkey-mail
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-65.el4_8
0:1.0.9-65.el4_8
thunderbird
Red Hat:enterprise_linux:4::as
 before 0:1.5.0.12-33.el4
0:1.5.0.12-33.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.5.0.12-33.el4
0:1.5.0.12-33.el4
thunderbird
Red Hat:enterprise_linux:4::desktop
 before 0:1.5.0.12-33.el4
0:1.5.0.12-33.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.5.0.12-33.el4
0:1.5.0.12-33.el4
thunderbird
Red Hat:enterprise_linux:4::es
 before 0:1.5.0.12-33.el4
0:1.5.0.12-33.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.5.0.12-33.el4
0:1.5.0.12-33.el4
thunderbird
Red Hat:enterprise_linux:4::ws
 before 0:1.5.0.12-33.el4
0:1.5.0.12-33.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.5.0.12-33.el4
0:1.5.0.12-33.el4
thunderbird
Red Hat:enterprise_linux:5::client
 before 0:2.0.0.24-10.el5_5
0:2.0.0.24-10.el5_5
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.0.0.24-10.el5_5
0:2.0.0.24-10.el5_5
thunderbird
Red Hat:rhel_productivity:5
 before 0:2.0.0.24-10.el5_5
0:2.0.0.24-10.el5_5
thunderbird-debuginfo
Red Hat:rhel_productivity:5
 before 0:2.0.0.24-10.el5_5
0:2.0.0.24-10.el5_5
xulrunner
Red Hat:enterprise_linux:6::client
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner-devel
Red Hat:enterprise_linux:6::client
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
firefox
Red Hat:enterprise_linux:6::client
 before 0:3.6.12-1.el6_0
0:3.6.12-1.el6_0
firefox-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:3.6.12-1.el6_0
0:3.6.12-1.el6_0
firefox
Red Hat:enterprise_linux:6::computenode
 before 0:3.6.12-1.el6_0
0:3.6.12-1.el6_0
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:3.6.12-1.el6_0
0:3.6.12-1.el6_0
xulrunner
Red Hat:enterprise_linux:6::computenode
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner-devel
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
firefox
Red Hat:enterprise_linux:6::server
 before 0:3.6.12-1.el6_0
0:3.6.12-1.el6_0
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.6.12-1.el6_0
0:3.6.12-1.el6_0
xulrunner
Red Hat:enterprise_linux:6::workstation
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
xulrunner-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.9.2.12-1.el6_0
0:1.9.2.12-1.el6_0
firefox
Red Hat:enterprise_linux:6::workstation
 before 0:3.6.12-1.el6_0
0:3.6.12-1.el6_0
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:3.6.12-1.el6_0
0:3.6.12-1.el6_0
thunderbird
Red Hat:enterprise_linux:6::client
 before 0:3.1.6-1.el6_0
0:3.1.6-1.el6_0
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:3.1.6-1.el6_0
0:3.1.6-1.el6_0
thunderbird
Red Hat:enterprise_linux:6::server
 before 0:3.1.6-1.el6_0
0:3.1.6-1.el6_0
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.1.6-1.el6_0
0:3.1.6-1.el6_0
thunderbird
Red Hat:enterprise_linux:6::workstation
 before 0:3.1.6-1.el6_0
0:3.1.6-1.el6_0
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:3.1.6-1.el6_0
0:3.1.6-1.el6_0
MozillaFirefox
openSUSE:Tumbleweed
 before 50.1.0-1.1
50.1.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
 before 45.5.1-1.1
45.5.1-1.1
firefox-esr
openSUSE:Tumbleweed
 before 128.5.1-1.1
128.5.1-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitMozilla Firefox Interleaved document.write/appendChild Memory Corruption2010-10-25
Exploit-DBMozilla Firefox - Interleaving 'document.write' / 'appendChild' Denial of Service2010-10-28
Exploit-DBMozilla Firefox - Simplified Memory Corruption (PoC)2010-10-28
Exploit-DBMozilla Firefox 3.6.8 < 3.6.11 - Interleaving 'document.write' / 'appendChild' Remote Overflow2010-10-29
Exploit-DBMozilla Firefox - Interleaving 'document.write' / 'appendChild' (Metasploit)2011-02-22

History

History
RecordedChangedSources
exploitation, exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3765 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published October 27, 2010. CISA lists it as known to be exploited, since October 6, 2025. EUVD reports exploitation since October 6, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 83.2%, the 99th percentile. Fixed in xulrunner 1.9.0.19-6.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 2,003 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open