CVE-2014-1490

CVE-2014-1490 describes a race condition in the libssl component of Mozilla Network Security Services (NSS), affecting Mozilla Firefox, Thunderbird, SeaMonkey, and other products. This vulnerability allows a remote attacker to trigger a use-after-free condition, leading to a denial of service or potentially other unspecified impacts during a resumption handshake. With a CVSS score of 9.3, this is a critical vulnerability due to its network-based attack vector, medium complexity, and high potential for confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.