CVE-2016-9079

CVE Published 2018-06-11
Related CWE(s) CWE-416: Use After Free
Related Vendor(s) mozilla, redhat, debian, torproject
Related Product(s) enterprise_linux_server_eus, thunderbird, enterprise_linux_server_aus, enterprise_linux, enterprise_linux_workstation, firefox_esr, firefox, enterprise_linux_server, tor, debian_linux, enterprise_linux_desktop
Exploitation Reported (CISA KEV) 2023-06-22
CVSS 3 Base Score 7.5 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References