vulnerability
MFSA2016-92 Firefox: Firefox SVG Animation Remote Code Execution (CVE-2016-9079)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Nov 30, 2016 | Dec 1, 2016 | Mar 27, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Nov 30, 2016
Added
Dec 1, 2016
Modified
Mar 27, 2026
Description
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
Solutions
mozilla-firefox-esr-upgrade-45_5_1mozilla-firefox-upgrade-50_0_2
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.