CVE-2025-1010 — Use-after-free in Custom Highlight
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR…
Published: 2025-02-04 · CVSS: 9.8 · CVSS 3.1
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7