Mozilla Firefox Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/10/2024. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≥ 128.1.0, < 128.3.1< 115.16.1< 131.0.2 | 128.3.1115.16.1131.0.2 |
| thunderbird | = 131.0≥ 128.0.1, < 128.3.1< 115.16.0 | 128.3.1115.16.0 |
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free