CVE-2025-1009 — Use-after-free in XSLT
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20…
Published: 2025-02-04 · CVSS: 9.8 · CVSS 3.1
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7