Search for vulnerabilities
Vulnerability details: VCID-ravu-wrs4-pfb5
Vulnerability ID VCID-ravu-wrs4-pfb5
Aliases CVE-2015-2728
Summary Security researcher Paul Bandha reported a type confusion error where part of IDBDatabase is read by the Indexed Database Manager and incorrectly used as a pointer when it shouldn't be used as such. This leads to memory corruption and the possibility of an exploitable crash.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')
System Score Found at
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
epss 0.03275 https://api.first.org/data/v1/epss?cve=CVE-2015-2728
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2015-61
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2728.json
https://api.first.org/data/v1/epss?cve=CVE-2015-2728
1236951 https://bugzilla.redhat.com/show_bug.cgi?id=1236951
CVE-2015-2728 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2728
mfsa2015-61 https://www.mozilla.org/en-US/security/advisories/mfsa2015-61
RHSA-2015:1207 https://access.redhat.com/errata/RHSA-2015:1207
USN-2656-1 https://usn.ubuntu.com/2656-1/
USN-2656-2 https://usn.ubuntu.com/2656-2/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86686
EPSS Score 0.03275
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:56.430051+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-61.md 37.0.0