Search/CVE-2014-1489
● CVE

CVE-2014-1489

Vendorsuse, canonical, oracle, opensuse, mozillaProductlinux enterprise desktop, linux enterprise server, linux enterprise software development kit, ubuntu linux, solaris, opensuse, firefoxDiscoveredFeb 6, 2014UpdatedApr 29, 2026

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.

View graph Watch Export
CVSS v3.1
—
EPSS
1.93%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
9 relationships
Timeline
disclosure → media coverage
Feb 6, 2014
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026