CVE-2016-2808

CVE-2016-2808 describes a critical vulnerability in the JavaScript engine of Mozilla Firefox, affecting versions before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1. This flaw allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website, stemming from a generation-count overflow and out-of-bounds HashMap write access. With a CVSS v3 score of 7.5 (High), the vulnerability requires user interaction (UI:R) but can be exploited over the network (AV:N) with high impact on confidentiality, integrity, and availability (C:H/I:H/A:H), though attack complexity is high (AC:H). Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed on the KEV catalog. Community discussion and media coverage are minimal, with only one mention and one article identified.