Lucene search

K
cvelistMozillaCVELIST:CVE-2018-12377
HistoryOct 18, 2018 - 1:00 p.m.

CVE-2018-12377

2018-10-1813:00:00
mozilla
raw.githubusercontent.com
2

9.1 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.5%

A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.