CVE-2023-37209

2023-07-0509:05:08

mozilla

www.cve.org

use-after-free

vulnerability

firefox

AI Score

8.4

Confidence

High

EPSS

0.002

Percentile

57.9%

JSON

A use-after-free condition existed in NotifyOnHistoryReload where a LoadingSessionHistoryEntry object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox < 115.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "115",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]