Search/CVE-2015-7196

● CVE

CVE-2015-7196

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.

View graph Watch Export

CVSS v3.1

—

EPSS

3.66%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

2 relationships

Timeline

disclosure → media coverage

Nov 5, 2015

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026