The issue is related to a use-after-free flaw in the nsDocShell destructor, which can be triggered under certain conditions. This can lead to a race condition, causing the use-after-free. There have been targeted attacks in the wild exploiting this flaw. The exploitation of this issue may allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.