CVE-2014-8631: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended DOM object restrictions via a call to an unspecified method.

Affected products

• Mozilla Firefox: up to and including 33.0
• Mozilla Seamonkey: up to and including 2.30

Published 2014-12-11. Last modified 2026-06-17.