Field Assessment
AI analysis pending.
CVE
CVE-2016-5281
Severity
CRITICAL
CVSS
9.8
EPSS
5.04%
Firefox Java
Original Filing — NVD Description
Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between JavaScript code and an SVG document.