CVE-2016-2812

—

CVSS 3.0

7.5 high

EPSS

2%p83

Published

Apr 30, 2016 (Apr 30, 2016)

Modified

Jun 17, 2026

Description

Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.

Vendors: mozilla
Products: firefox
Weakness: CWE-362
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.