CVE-2016-9079: Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
Published Jun 11, 2018 · Updated Jun 17, 2026
Required action
Apply updates per vendor instructions.
Advisory details
From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321066
- https://security.gentoo.org/glsa/201701-15
- https://security.gentoo.org/glsa/201701-35
- https://www.debian.org/security/2016/dsa-3730
- https://www.exploit-db.com/exploits/41151/
- https://www.exploit-db.com/exploits/42327/
- https://www.mozilla.org/security/advisories/mfsa2016-92/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Mozilla vulnerabilities
All Mozilla entriesCVE-2024-9680
Mozilla Firefox Use-After-Free Vulnerability
critical9.8ExploitedOct 9, 2024CVE-2022-26485
Mozilla Firefox Use-After-Free Vulnerability
high8.8ExploitedDec 22, 2022CVE-2022-26486
Mozilla Firefox Use-After-Free Vulnerability
critical9.6ExploitedDec 22, 2022CVE-2020-6819
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
high8.1ExploitedApr 24, 2020CVE-2020-6820
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
high8.1ExploitedApr 24, 2020CVE-2019-17026
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
high8.8ExploitedMar 2, 2020
