CVE

Id
92078  
CVE No.
CVE-2016-5259  
Status
Candidate  
Description
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.  
Phase
Assigned (20160603)  
Votes
None (candidate not yet proposed)  
Comments