Search for vulnerabilities
Vulnerability details: VCID-kq9k-xvkp-cyg8
Vulnerability ID VCID-kq9k-xvkp-cyg8
Aliases CVE-2015-4492
Summary Security researcher Looben Yang discovered a use-after-free vulnerability when recursively calling .open() on an XMLHttpRequest in a SharedWorker.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86044
EPSS Score 0.02997
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:53.093999+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-92.md 37.0.0