CVE-2016-9079VulnerabilityPublished 06/22/2023Updated 10/24/2026
CVE-2016-9079: Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
Affects Mozilla Firefox, Firefox ESR, and ThunderbirdSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 06/22/2023
- KEV deadline
- 07/13/2023
- EPSS
- 87.4% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.