Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-bcbh-azrk-fqe7
Vulnerability ID VCID-bcbh-azrk-fqe7
Aliases CVE-2011-3660
Summary Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.These vulnerabilities did not affect the older browser engine used prior to Firefox 4.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.0394 https://api.first.org/data/v1/epss?cve=CVE-2011-3660
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2011-53
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3660.json
https://api.first.org/data/v1/epss?cve=CVE-2011-3660
770676 https://bugzilla.redhat.com/show_bug.cgi?id=770676
CVE-2011-3660 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3660
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2011-53 https://www.mozilla.org/en-US/security/advisories/mfsa2011-53
USN-1306-1 https://usn.ubuntu.com/1306-1/
USN-1343-1 https://usn.ubuntu.com/1343-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.88535
EPSS Score 0.0394
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:27:54.976288+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2011/mfsa2011-53.md 38.6.0