CVE-2015-4502: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which allows remote attackers to bypass intended window access restrictions via a crafted web site.

Affected products

• Mozilla Firefox: up to and including 40.0.3

Published 2015-09-24. Last modified 2026-06-17.