coldbraid

CVE-2010-3765 Mozilla Multiple Products

Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames,…

CVSS
not scored

On CISA’s exploited list

Mozilla Multiple Products Remote Code Execution Vulnerability

Added
2025-10-06
Federal patch deadline
2025-10-27
Ransomware use
not known