CVE-2015-0810

no score yetEPSS 1.5%

Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows remote attackers to conduct clickjacking attacks via a Flash object in conjunction with DIV elements associated with layered presentation, and crafted JavaScript code that interacts with an IMG element.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2015-04-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

http://www.mozilla.org/security/announce/2015/mfsa2015-35.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1031996
https://bugzilla.mozilla.org/show_bug.cgi?id=1125013
https://security.gentoo.org/glsa/201512-10

Check your stack JSON