Search for vulnerabilities
| Vulnerability ID | VCID-uzx7-1bns-h7cx |
| Aliases |
CVE-2010-0160
|
| Summary | Security researcher Orlando Barrera II of SecTheory reported, via TippingPoint's Zero Day Initiative, that Mozilla's implementation of Web Workers contained an error in its handling of array data types when processing posted messages. This error could be used by an attacker to corrupt heap memory and crash the browser, potentially running arbitrary code on a victim's computer.Web Workers were introduced in Firefox 3.5; Firefox 3.0 and earlier versions were not affected. |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| epss | 0.05179 | https://api.first.org/data/v1/epss?cve=CVE-2010-0160 |
| generic_textual | critical | https://www.mozilla.org/en-US/security/advisories/mfsa2010-02 |
| Reference id | Reference type | URL |
|---|---|---|
| https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0160.json | ||
| https://api.first.org/data/v1/epss?cve=CVE-2010-0160 | ||
| 566049 | https://bugzilla.redhat.com/show_bug.cgi?id=566049 | |
| CVE-2010-0160 | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160 | |
| GLSA-201301-01 | https://security.gentoo.org/glsa/201301-01 | |
| mfsa2010-02 | https://www.mozilla.org/en-US/security/advisories/mfsa2010-02 | |
| RHSA-2010:0112 | https://access.redhat.com/errata/RHSA-2010:0112 | |
| USN-895-1 | https://usn.ubuntu.com/895-1/ | |
| USN-896-1 | https://usn.ubuntu.com/896-1/ |
| Percentile | 0.9005 |
| EPSS Score | 0.05179 |
| Published At | May 29, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-05-29T08:27:14.336820+00:00 | Mozilla Importer | Import | https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2010/mfsa2010-02.md | 38.6.0 |