--- id: "CVE-2016-9079" kind: "vulnerability" aliases: ["CVE-2016-9079"] title: "A use-after-free vulnerability in SVG Animation has been discovered" severity: "high" cvss: 7.5 epss: null exploited: true status: "open" category: "package" products: [{"name": "Mozilla Firefox, Firefox ESR, and Thunderbird", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "debian linux", "fixed": [], "affected": "= 9.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux", "fixed": [], "affected": "= 6.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux", "fixed": [], "affected": "= 7.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux desktop", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux desktop", "fixed": [], "affected": "= 6.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux desktop", "fixed": [], "affected": "= 7.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server", "fixed": [], "affected": "= 6.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server", "fixed": [], "affected": "= 7.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server aus", "fixed": [], "affected": "= 7.3", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server aus", "fixed": [], "affected": "= 7.4", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server eus", "fixed": [], "affected": "= 7.3", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server eus", "fixed": [], "affected": "= 7.4", "ecosystem": "vendor"}, {"name": "redhat enterprise linux server eus", "fixed": [], "affected": "= 7.5", "ecosystem": "vendor"}, {"name": "redhat enterprise linux workstation", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux workstation", "fixed": [], "affected": "= 6.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux workstation", "fixed": [], "affected": "= 7.0", "ecosystem": "vendor"}, {"name": "mozilla thunderbird", "fixed": ["45.5.1"], "affected": "< 45.5.1", "ecosystem": "vendor"}, {"name": "mozilla firefox", "fixed": ["50.0.2"], "affected": "< 50.0.2", "ecosystem": "vendor"}, {"name": "mozilla firefox", "fixed": ["45.5.1"], "affected": "< 45.5.1", "ecosystem": "vendor"}, {"name": "torproject tor", "fixed": [], "affected": "", "ecosystem": "vendor"}] ecosystems: ["vendor"] tags: ["exploited", "firefox", "firefox-esr", "package", "thunderbird", "tor-browser", "windows"] not_affected_if: ["unpatched-builds-not-in-use"] published_at: "2018-06-11T21:29:01+00:00" first_seen_at: "2026-10-23T19:11:51+00:00" updated_at: "2026-10-23T22:29:04+00:00" sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-9079", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9079", "first_seen_at": "2026-10-23T22:29:04+00:00"}] --- # A use-after-free vulnerability in SVG Animation has been discovered Mozilla Firefox, Firefox ESR and Thunderbird have a use-after-free bug in SVG animation code. An attacker who gets a user to load a crafted page can run code in the browser, and CISA reports it is exploited in the wild. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - vendor:Mozilla Firefox, Firefox ESR, and Thunderbird affected ? fixed ? - vendor:debian linux affected = 9.0 fixed ? - vendor:redhat enterprise linux affected = 5.0 fixed ? - vendor:redhat enterprise linux affected = 6.0 fixed ? - vendor:redhat enterprise linux affected = 7.0 fixed ? - vendor:redhat enterprise linux desktop affected = 5.0 fixed ? - vendor:redhat enterprise linux desktop affected = 6.0 fixed ? - vendor:redhat enterprise linux desktop affected = 7.0 fixed ? - vendor:redhat enterprise linux server affected = 5.0 fixed ? - vendor:redhat enterprise linux server affected = 6.0 fixed ? - vendor:redhat enterprise linux server affected = 7.0 fixed ? - vendor:redhat enterprise linux server aus affected = 7.3 fixed ? - vendor:redhat enterprise linux server aus affected = 7.4 fixed ? - vendor:redhat enterprise linux server eus affected = 7.3 fixed ? - vendor:redhat enterprise linux server eus affected = 7.4 fixed ? - vendor:redhat enterprise linux server eus affected = 7.5 fixed ? - vendor:redhat enterprise linux workstation affected = 5.0 fixed ? - vendor:redhat enterprise linux workstation affected = 6.0 fixed ? - vendor:redhat enterprise linux workstation affected = 7.0 fixed ? - vendor:mozilla thunderbird affected < 45.5.1 fixed 45.5.1 - vendor:mozilla firefox affected < 50.0.2 fixed 50.0.2 - vendor:mozilla firefox affected < 45.5.1 fixed 45.5.1 - vendor:torproject tor affected ? fixed ? ## How to check Check the installed Firefox, Firefox ESR or Thunderbird version under Help > About; unknown for a command-line check. ## Fix Update Firefox, Firefox ESR and Thunderbird to a release from Mozilla that fixes CVE-2016-9079, per vendor instructions; the fixed version is unknown from these sources. ## Timeline - 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-9079 - 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2016-9079 ## From the sources A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1. --- _Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_