VULNERABILITY INTELLIGENCE
CVE-2016-2811
CVSS score8.8 HIGH
EPSS probability2.94%
CISA KEVNot currently listed
Published2016-04-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.
Primary references
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org — Vendor Advisory
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org
- security@mozilla.org
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory