HackerFeeds
All CVEs

CVE-2016-9079

HIGH7.5
CISA KEV

Published 2018-06-11 · Updated 2026-06-17 · Source security@mozilla.org

Summary

CVE-2016-9079 is a high-severity (CVSS 7.5) vulnerability in Mozilla Firefox, Firefox ESR, and Thunderbird. CISA added it to the Known Exploited Vulnerabilities catalog on June 22, 2023, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by July 13, 2023. CISA does not currently list it as used in ransomware campaigns. Mozilla has 13 vulnerabilities in the KEV catalog, 1 of them linked to ransomware.

All 13 known-exploited Mozilla vulnerabilities →

Description

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-416CWE-416

CISA Known-Exploited Vulnerability

Product: Mozilla — Firefox, Firefox ESR, and Thunderbird

Name: Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

Date added: 2023-06-22 · Due: 2023-07-13

Required action: Apply updates per vendor instructions.

References

View on NVD