Use-after-free

firefox is vulnerable to use after free. The vulnerability exists due to a lack of sanitization of the ChannelEventQueue::mOwner...

Mozilla: Use-after-free of ChannelEventQueue::mOwner

The Mozilla Foundation Security Advisory describes this flaw as: Certain network request objects were freed too early when releasing a network request handle. This could have led to a use-after-free issue, causing a potentially exploitable crash...