VDB

CVE-2014-8632

CVE-2014-8632 PUBLISHED CVSS 4.300000190734863 MEDIUM

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.

EPSS 1.02% · 61.9th percentile

Risk Scores

CVSS 2.0
4.300000190734863
EPSS Score
1.02%
61.9th percentile

Affected Products

VendorProductVersions
n/an/an/a
mozillafirefox0
mozillaseamonkey0

Timeline

  • Dec 11, 2014 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Oct 29, 2022 EPSS Score
  • Dec 21, 2022 EPSS Score
  • Feb 12, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 6, 2023 EPSS Score
  • May 29, 2023 EPSS Score
  • Jul 21, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›