Dashboard / CVE-2010-3765

CVE-2010-3765

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.

CISA Known Exploited Vulnerability

Vendor / Product Mozilla — Multiple Products
Date Added 2025-10-06
Remediation Due 2025-10-27
https://www.mozilla.org/en-US/security/advisories/mfsa2010-73 ; https://nvd.nist.gov/vuln/detail/CVE-2010-3765

Weakness Classification (1)

Affected Software (56)

VendorProductVersion
mozilla firefox 3.5
mozilla firefox 3.5.1
mozilla firefox 3.5.2
mozilla firefox 3.5.3
mozilla firefox 3.5.4
mozilla firefox 3.5.5
mozilla firefox 3.5.6
mozilla firefox 3.5.7
mozilla firefox 3.5.8
mozilla firefox 3.5.9
mozilla firefox 3.5.10
mozilla firefox 3.5.11
mozilla firefox 3.5.12
mozilla firefox 3.5.13
mozilla firefox 3.5.14
mozilla firefox 3.6
mozilla firefox 3.6.2
mozilla firefox 3.6.3
mozilla firefox 3.6.4
mozilla firefox 3.6.6
mozilla firefox 3.6.7
mozilla firefox 3.6.8
mozilla firefox 3.6.9
mozilla firefox 3.6.10
mozilla firefox 3.6.11
mozilla seamonkey 2.0
mozilla seamonkey 2.0
mozilla seamonkey 2.0
mozilla seamonkey 2.0
mozilla seamonkey 2.0
Showing 30 of 56 entries

References & Advisories (52)

Showing 25 of 52 references

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

83.16%
Raw Score 0.831560
Percentile 99.7%
Date 2026-10-29

Intelligence Sources

kev ref →

External Links