VULNERABILITY INTELLIGENCE

CVE-2015-7204

CVSS score6.8 MEDIUM

EPSS probability3.49%

CISA KEVNot currently listed

Published2015-12-16

Last modified2026-06-17

Description

Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.