{"schema_version":"2","view":"grouped","data":[{"id":2845,"cve_ids":["CVE-2013-1675"],"payload":{"kind":"advisory","title":"Mozilla Firefox Information Disclosure Vulnerability","summary":"Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-1675","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-1675","aliases":["CVE-2013-1675"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-1675","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1675","dueDate":"2022-03-24","product":"Firefox","dateAdded":"2022-03-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","vulnerabilityName":"Mozilla Firefox Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-1675","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:69189f11-4422-4206-8593-086b743c93a0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1675","advisory_id":"69189f11-4422-4206-8593-086b743c93a0","event_types":["advisory"],"published_at":"2026-10-24T21:25:43.843185+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A69189f11-4422-4206-8593-086b743c93a0","group":{"id":"advisory:69189f11-4422-4206-8593-086b743c93a0","revision":1,"primary_event_id":2850,"change":"published","superseded_by":[],"changed":{"id":2850,"cve_ids":["CVE-2013-1675"],"payload":{"kind":"advisory","title":"Mozilla Firefox Information Disclosure Vulnerability","summary":"Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-1675","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-1675","aliases":["CVE-2013-1675"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-1675","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1675","dueDate":"2022-03-24","product":"Firefox","dateAdded":"2022-03-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","vulnerabilityName":"Mozilla Firefox Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-1675","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:69189f11-4422-4206-8593-086b743c93a0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1675","advisory_id":"69189f11-4422-4206-8593-086b743c93a0","event_types":["advisory"],"published_at":"2026-10-24T21:25:43.843185+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2850"},"members":[{"id":2850,"cve_ids":["CVE-2013-1675"],"payload":{"kind":"advisory","title":"Mozilla Firefox Information Disclosure Vulnerability","summary":"Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-1675","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-1675","aliases":["CVE-2013-1675"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-1675","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1675","dueDate":"2022-03-24","product":"Firefox","dateAdded":"2022-03-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","vulnerabilityName":"Mozilla Firefox Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-1675","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:69189f11-4422-4206-8593-086b743c93a0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1675","advisory_id":"69189f11-4422-4206-8593-086b743c93a0","event_types":["advisory"],"published_at":"2026-10-24T21:25:43.843185+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2850"}]}},{"id":2761,"cve_ids":["CVE-2022-26485"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-26485","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26485","aliases":["CVE-2022-26485"],"affected":[],"modified":"2022-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-26485","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26485","dueDate":"2022-03-21","product":"Firefox","dateAdded":"2022-03-07","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-26485","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ae57b528-3241-4497-b40e-5f5fed5d3c44","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26485","advisory_id":"ae57b528-3241-4497-b40e-5f5fed5d3c44","event_types":["advisory"],"published_at":"2026-10-24T21:24:00.755861+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-07T00:00:00+00:00","detail_url":"/advisories/advisory%3Aae57b528-3241-4497-b40e-5f5fed5d3c44","group":{"id":"advisory:ae57b528-3241-4497-b40e-5f5fed5d3c44","revision":1,"primary_event_id":2768,"change":"published","superseded_by":[],"changed":{"id":2768,"cve_ids":["CVE-2022-26485"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-26485","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26485","aliases":["CVE-2022-26485"],"affected":[],"modified":"2022-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-26485","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26485","dueDate":"2022-03-21","product":"Firefox","dateAdded":"2022-03-07","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-26485","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ae57b528-3241-4497-b40e-5f5fed5d3c44","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26485","advisory_id":"ae57b528-3241-4497-b40e-5f5fed5d3c44","event_types":["advisory"],"published_at":"2026-10-24T21:24:00.755861+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-07T00:00:00+00:00","detail_url":"/events/2768"},"members":[{"id":2768,"cve_ids":["CVE-2022-26485"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-26485","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26485","aliases":["CVE-2022-26485"],"affected":[],"modified":"2022-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-26485","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26485","dueDate":"2022-03-21","product":"Firefox","dateAdded":"2022-03-07","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-26485","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ae57b528-3241-4497-b40e-5f5fed5d3c44","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26485","advisory_id":"ae57b528-3241-4497-b40e-5f5fed5d3c44","event_types":["advisory"],"published_at":"2026-10-24T21:24:00.755861+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-07T00:00:00+00:00","detail_url":"/events/2768"}]}},{"id":2760,"cve_ids":["CVE-2022-26486"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-26486","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26486","aliases":["CVE-2022-26486"],"affected":[],"modified":"2022-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-26486","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26486","dueDate":"2022-03-21","product":"Firefox","dateAdded":"2022-03-07","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-26486","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d55ab73d-25b3-49a4-a946-bd0e71aec102","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26486","advisory_id":"d55ab73d-25b3-49a4-a946-bd0e71aec102","event_types":["advisory"],"published_at":"2026-10-24T21:24:00.121607+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-07T00:00:00+00:00","detail_url":"/advisories/advisory%3Ad55ab73d-25b3-49a4-a946-bd0e71aec102","group":{"id":"advisory:d55ab73d-25b3-49a4-a946-bd0e71aec102","revision":1,"primary_event_id":2767,"change":"published","superseded_by":[],"changed":{"id":2767,"cve_ids":["CVE-2022-26486"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-26486","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26486","aliases":["CVE-2022-26486"],"affected":[],"modified":"2022-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-26486","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26486","dueDate":"2022-03-21","product":"Firefox","dateAdded":"2022-03-07","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-26486","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d55ab73d-25b3-49a4-a946-bd0e71aec102","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26486","advisory_id":"d55ab73d-25b3-49a4-a946-bd0e71aec102","event_types":["advisory"],"published_at":"2026-10-24T21:24:00.121607+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-07T00:00:00+00:00","detail_url":"/events/2767"},"members":[{"id":2767,"cve_ids":["CVE-2022-26486"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-26486","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26486","aliases":["CVE-2022-26486"],"affected":[],"modified":"2022-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-26486","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26486","dueDate":"2022-03-21","product":"Firefox","dateAdded":"2022-03-07","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-26486","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d55ab73d-25b3-49a4-a946-bd0e71aec102","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26486","advisory_id":"d55ab73d-25b3-49a4-a946-bd0e71aec102","event_types":["advisory"],"published_at":"2026-10-24T21:24:00.121607+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-07T00:00:00+00:00","detail_url":"/events/2767"}]}},{"id":2519,"cve_ids":["CVE-2015-4495"],"payload":{"kind":"advisory","title":"Mozilla Firefox Security Feature Bypass Vulnerability","summary":"Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-4495","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-4495","aliases":["CVE-2015-4495"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2015-4495","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4495","dueDate":"2022-06-15","product":"Firefox","dateAdded":"2022-05-25","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.","vulnerabilityName":"Mozilla Firefox Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-4495","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ad2cf1a3-dffe-4441-b60c-7981da9ce028","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4495","advisory_id":"ad2cf1a3-dffe-4441-b60c-7981da9ce028","event_types":["advisory"],"published_at":"2026-10-24T21:20:05.123451+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/advisories/advisory%3Aad2cf1a3-dffe-4441-b60c-7981da9ce028","group":{"id":"advisory:ad2cf1a3-dffe-4441-b60c-7981da9ce028","revision":1,"primary_event_id":2531,"change":"published","superseded_by":[],"changed":{"id":2531,"cve_ids":["CVE-2015-4495"],"payload":{"kind":"advisory","title":"Mozilla Firefox Security Feature Bypass Vulnerability","summary":"Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-4495","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-4495","aliases":["CVE-2015-4495"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2015-4495","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4495","dueDate":"2022-06-15","product":"Firefox","dateAdded":"2022-05-25","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.","vulnerabilityName":"Mozilla Firefox Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-4495","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ad2cf1a3-dffe-4441-b60c-7981da9ce028","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4495","advisory_id":"ad2cf1a3-dffe-4441-b60c-7981da9ce028","event_types":["advisory"],"published_at":"2026-10-24T21:20:05.123451+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2531"},"members":[{"id":2531,"cve_ids":["CVE-2015-4495"],"payload":{"kind":"advisory","title":"Mozilla Firefox Security Feature Bypass Vulnerability","summary":"Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-4495","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-4495","aliases":["CVE-2015-4495"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2015-4495","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4495","dueDate":"2022-06-15","product":"Firefox","dateAdded":"2022-05-25","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.","vulnerabilityName":"Mozilla Firefox Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-4495","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ad2cf1a3-dffe-4441-b60c-7981da9ce028","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4495","advisory_id":"ad2cf1a3-dffe-4441-b60c-7981da9ce028","event_types":["advisory"],"published_at":"2026-10-24T21:20:05.123451+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2531"}]}},{"id":1070,"cve_ids":["CVE-2024-9680"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-9680","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-9680","aliases":["CVE-2024-9680"],"affected":[],"modified":"2024-10-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2024-9680","notes":"https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-9680","dueDate":"2024-11-05","product":"Firefox","dateAdded":"2024-10-15","vendorProject":"Mozilla","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2024-9680","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:412ae01f-be93-4414-8a69-8f318240916d","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680","advisory_id":"412ae01f-be93-4414-8a69-8f318240916d","event_types":["advisory"],"published_at":"2026-10-24T20:55:22.74188+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-10-15T00:00:00+00:00","detail_url":"/advisories/advisory%3A412ae01f-be93-4414-8a69-8f318240916d","group":{"id":"advisory:412ae01f-be93-4414-8a69-8f318240916d","revision":1,"primary_event_id":1062,"change":"published","superseded_by":[],"changed":{"id":1062,"cve_ids":["CVE-2024-9680"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-9680","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-9680","aliases":["CVE-2024-9680"],"affected":[],"modified":"2024-10-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2024-9680","notes":"https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-9680","dueDate":"2024-11-05","product":"Firefox","dateAdded":"2024-10-15","vendorProject":"Mozilla","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2024-9680","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:412ae01f-be93-4414-8a69-8f318240916d","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680","advisory_id":"412ae01f-be93-4414-8a69-8f318240916d","event_types":["advisory"],"published_at":"2026-10-24T20:55:22.74188+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-10-15T00:00:00+00:00","detail_url":"/events/1062"},"members":[{"id":1062,"cve_ids":["CVE-2024-9680"],"payload":{"kind":"advisory","title":"Mozilla Firefox Use-After-Free Vulnerability","summary":"Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-9680","products":[{"name":{"value":"Firefox","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-9680","aliases":["CVE-2024-9680"],"affected":[],"modified":"2024-10-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2024-9680","notes":"https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-9680","dueDate":"2024-11-05","product":"Firefox","dateAdded":"2024-10-15","vendorProject":"Mozilla","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2024-9680","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:412ae01f-be93-4414-8a69-8f318240916d","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680","advisory_id":"412ae01f-be93-4414-8a69-8f318240916d","event_types":["advisory"],"published_at":"2026-10-24T20:55:22.74188+00:00","technologies":["core-kev","firefox"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-10-15T00:00:00+00:00","detail_url":"/events/1062"}]}}],"next_after":2845,"next_before":1070}