CVE-2017-5435

CVE-2017-5435 is a critical use-after-free vulnerability affecting Mozilla Firefox, Firefox ESR, and Thunderbird versions prior to 53 and 52.1 respectively. This flaw occurs during transaction processing in the editor during design mode interactions, leading to a potentially exploitable crash. With a CVSS score of 9.8 (CRITICAL), it can be exploited remotely with low attack complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.