peter bassill · operator
$ cve CVE-2016-1930 JSON

CVE-2016-1930

9.8
CRITICAL · CVSS 3.0 · EPSS 6% (pctl 93)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS5.99% — more likely to be exploited than 93% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploitnone known
Published2016-01-31
Last modified2026-06-17

Affected (4)

VendorProduct
mozillafirefox
opensuseleap
opensuseopensuse
oraclelinux

References

→ the Explorer  ·  watch your stack  ·  NVD