Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-vt1n-t5vm-67cc
Vulnerability ID VCID-vt1n-t5vm-67cc
Aliases CVE-2011-2995
Summary Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled,, but are potentially a risk in browser or browser-like contexts in those products.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.0266 https://api.first.org/data/v1/epss?cve=CVE-2011-2995
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2011-36
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2995.json
https://api.first.org/data/v1/epss?cve=CVE-2011-2995
741902 https://bugzilla.redhat.com/show_bug.cgi?id=741902
CVE-2011-2995 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2011-36 https://www.mozilla.org/en-US/security/advisories/mfsa2011-36
RHSA-2011:1341 https://access.redhat.com/errata/RHSA-2011:1341
RHSA-2011:1342 https://access.redhat.com/errata/RHSA-2011:1342
USN-1210-1 https://usn.ubuntu.com/1210-1/
USN-1213-1 https://usn.ubuntu.com/1213-1/
USN-1222-1 https://usn.ubuntu.com/1222-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86032
EPSS Score 0.0266
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:27:56.296300+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2011/mfsa2011-36.md 38.6.0