CVE-2014-1540: Mozilla Firefox

High severity, CVSS 9.3. EPSS: 3.8% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.

Affected products

• Mozilla Firefox: up to and including 29.0.1

Published 2014-06-11. Last modified 2026-06-17.