PT-2024-6716 · Mozilla+10 · Firefox Esr+12
Damien Schaeffer
·
Published
2024-03-25
·
Updated
2026-04-22
·
CVE-2024-9680
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 128.3.1 ESR through 131.0.2
Mozilla Thunderbird versions 128.3.1 through 128.4.2
Description
The reported issue addresses a use-after-free vulnerability in Mozilla Firefox and Thunderbird. This vulnerability could potentially allow for arbitrary code execution. The issue affects versions 128.3.1 ESR and later of Firefox, and versions 128.3.1 and later of Thunderbird. Multiple security issues were discovered in both applications.
Recommendations
Mozilla Firefox versions 128.3.1 ESR through 131.0.2: Upgrade to the latest version.
Mozilla Thunderbird versions 128.3.1 through 128.4.2: Upgrade to the latest version.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Firefox Esr
Linuxmint
Firefox
Red Hat
Red Os
Rocky Linux
Suse
Thunderbird
Ubuntu