Recorded 14 Oct 2026 at 10:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Mozilla Multiple Products Remote Code Execution Vulnerability
Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.
What it said
- CVE
- CVE-2010-3765
- Vendor
- Mozilla
- Product
- Multiple Products
- CISA KEV
- Listed 6 Oct 2025
- Known ransomware use
- Not stated
- Federal remediation due
- 27 Oct 2025
Recorded links
Source evidence when recorded
- CISA KEV
- Complete at observationRead 14 Oct 2026 at 10:18 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.