Known Exploited Vulnerabilities October 06, 2025 · CISA KEV Catalog

CVE-2010-3765: Mozilla Multiple Products Remote Code Execution Vulnerability

Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2010-3765 Mozilla
Related: CVE-2024-9680: Mozilla Firefox Use-After-Free Vulnerability Known Exploited Vulnerabilities · Oct 15, 2024
CVE-2016-9079: Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Known Exploited Vulnerabilities · Jun 22, 2023
CVE-2015-4495: Mozilla Firefox Security Feature Bypass Vulnerability Known Exploited Vulnerabilities · May 25, 2022