A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon prior to 27.9.3.
palemoon pale moon