Search for vulnerabilities
Vulnerability details: VCID-ya5w-hkw5-9yg8
Vulnerability ID VCID-ya5w-hkw5-9yg8
Aliases CVE-2014-1512
Summary Security research firm VUPEN, via TippingPoint's Pwn2Own contest, reported that memory pressure during Garbage Collection could lead to memory corruption of TypeObjects in the JS engine, resulting in an exploitable use-after-free condition.In general this flaw cannot be exploited through email in the Thunderbird and Seamonkey products because scripting is disabled, but is potentially a risk in browser or browser-like contexts.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
epss 0.1791 https://api.first.org/data/v1/epss?cve=CVE-2014-1512
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2014-30
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1512.json
https://api.first.org/data/v1/epss?cve=CVE-2014-1512
1077491 https://bugzilla.redhat.com/show_bug.cgi?id=1077491
CVE-2014-1512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1512
mfsa2014-30 https://www.mozilla.org/en-US/security/advisories/mfsa2014-30
RHSA-2014:0310 https://access.redhat.com/errata/RHSA-2014:0310
RHSA-2014:0316 https://access.redhat.com/errata/RHSA-2014:0316
USN-2150-1 https://usn.ubuntu.com/2150-1/
USN-2151-1 https://usn.ubuntu.com/2151-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.94869
EPSS Score 0.1791
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:45.636659+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2014/mfsa2014-30.md 37.0.0