Description

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

INFO

Published Date :

2024-10-09T12:59:07.108Z

Last Modified :

2025-11-03T22:33:32.973Z

Source :

mozilla
AFFECTED PRODUCTS

The following products are affected by CVE-2024-9680 vulnerability.

Vendors Products
Debian
  • Debian Linux
Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
Redhat
  • Enterprise Linux
  • Rhel Aus
  • Rhel E4s
  • Rhel Els
  • Rhel Eus
  • Rhel Tus

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact