Search/CVE-2006-4565
● CVE

CVE-2006-4565

VendormozillaProductfirefox, thunderbird, seamonkeyDiscoveredSep 15, 2006UpdatedApr 16, 2026

Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."

View graph Watch Export
CVSS v3.1
—
EPSS
6.17%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.11pp
6.06% → 6.17% over 2 tracked changes
Connections
4 relationships
Timeline
disclosure → media coverage
Sep 15, 2006
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026