CVE-2016-2811

—

CVSS 3.0

8.8 high

EPSS

3%p86

Published

Apr 30, 2016 (Apr 30, 2016)

Modified

Jun 17, 2026

Description

Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.

Vendors: mozilla
Products: firefox
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news0 stories

No ingested article mentions this CVE yet.