CVE-2015-2743

CVE-2015-2743 describes a vulnerability in PDF.js within Mozilla Firefox versions prior to 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1, as well as products from Novell and Oracle. This flaw allows excessive privileges for internal Workers, potentially enabling remote attackers to execute arbitrary code by bypassing the Same Origin Policy. With a CVSS score of 7.5, this high-severity vulnerability is network-exploitable with low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not currently a high-profile threat.