peter bassill · operator
$ cve CVE-2013-5618 JSON

CVE-2013-5618

9.8
CRITICAL · CVSS 3.1 · EPSS 10.4% (pctl 96)

Patch early

EPSS 10.4% — above the 10% action threshold.

Description

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS10.41% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-416
On CISA KEVno
Public exploitnone known
Published2013-12-11
Last modified2026-06-16

Affected (16)

VendorProduct
canonicalubuntu linux
fedoraprojectfedora
mozillafirefox
mozillaseamonkey
mozillathunderbird
opensuseopensuse
redhatenterprise linux desktop
redhatenterprise linux eus
redhatenterprise linux server
redhatenterprise linux server aus
redhatenterprise linux server eus
redhatenterprise linux server tus
redhatenterprise linux workstation
susesuse linux enterprise desktop
susesuse linux enterprise server
susesuse linux enterprise software development kit

References

→ the Explorer  ·  watch your stack  ·  NVD