Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-d3hg-x5tb-cuer
Vulnerability ID VCID-d3hg-x5tb-cuer
Aliases CVE-2010-0166
Summary Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation.
Status Published
Exploitability 2.0
Weighted Severity 9.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
epss 0.17908 https://api.first.org/data/v1/epss?cve=CVE-2010-0166
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2010-11
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2010-0166
CVE-2010-0166 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0166
CVE-2010-0166;OSVDB-63266 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/33800.html
CVE-2010-0166;OSVDB-63266 Exploit https://www.securityfocus.com/bid/38943/info
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2010-11 https://www.mozilla.org/en-US/security/advisories/mfsa2010-11
Data source Exploit-DB
Date added March 24, 2010
Description Mozilla Firefox 3.6 - 'gfxTextRun::SanitizeGlyphRuns()' Remote Memory Corruption
Ransomware campaign use Known
Source publication date March 24, 2010
Exploit type dos
Platform multiple
Source update date June 18, 2014
Source URL https://www.securityfocus.com/bid/38943/info
Exploit Prediction Scoring System (EPSS)
Percentile 0.95111
EPSS Score 0.17908
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:06:37.952881+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201301-01 38.0.0