CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.

Affected products

Alt Linux, Centos, Firefox, Firefox Esr, Red Hat, Suse, Thunderbird, Ubuntu

Debian Debian Linux

= 9.0

Fix

Available

CVSS 3.0

9.8 CRITICAL

EPSS

21.1% (97th percentile)

Weakness

CWE-416

NVD status

Modified

Published

2018-06-11