ACTIVELY EXPLOITED
CVE-2015-4495: Mozilla Firefox Security Feature Bypass Vulnerability
| Vendor | Mozilla |
|---|---|
| Product | Firefox |
| Actively exploited | Yes |
| Added to CISA KEV | 25 May 2022 |
| CISA federal deadline | 15 Jun 2022 |
| Weakness (CWE) | CWE-200 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.
SOURCES
Other Mozilla flaws
- CVE-2010-3765: Mozilla Multiple Products Remote Code Execution Vulnerability
- CVE-2024-9680: Mozilla Firefox Use-After-Free Vulnerability
- CVE-2016-9079: Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
- CVE-2019-11708: Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
- CVE-2019-11707: Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.