Skip to main content
Cyber Retaliator Solutions
Cyber RetaliatorSolutions
All vulnerabilities
CVE-2024-9680 Known ransomware use

Mozilla Firefox Use-After-Free Vulnerability

Mozilla — Firefox

Added to KEV catalog
15 October 2024
Federal remediation due date
5 November 2024
Weakness classification (CWE)
CWE-416

CISA Description

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-9680

View on NVD View on MITRE CVE View full CISA catalog

More Mozilla Vulnerabilities

CVE-2010-3765

Mozilla Multiple Products Remote Code Execution Vulnerability

CVE-2016-9079

Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

CVE-2015-4495

Mozilla Firefox Security Feature Bypass Vulnerability

CVE-2019-11708

Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability

CVE-2019-11707

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services