Unrated severityNVD Advisory· Published Sep 24, 2015· Updated Jun 17, 2026

CVE-2015-7327

Description

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mozilla Corporation/Firefox2 versions
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=40.0.3
- (no CPE)range: <41.0

Patches

Vulnerability mechanics

References

arxiv.org/abs/1502.07373nvdExploit
www.mozilla.org/security/announce/2015/mfsa2015-114.htmlnvdVendor Advisory
www.securitytracker.com/id/1033640nvd
bugzilla.mozilla.org/show_bug.cginvd
bugzilla.mozilla.org/show_bug.cginvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000