VULNERABILITY INTELLIGENCE
CVE-2012-3965
CVSS score9.3 HIGH
EPSS probability2.42%
CISA KEVNot currently listed
Published2012-08-29
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.