VULNERABILITY INTELLIGENCE

CVE-2018-12377

CVSS score9.8 CRITICAL

EPSS probability3.36%

CISA KEVNot currently listed

Published2018-10-18

Last modified2026-06-17

Description

A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1…