CVE-2024-3864

ALTO 8.1CVE-2024-3864 · Published 16/04/2024 · updated 17/06/2026

In breve

CVE-2024-3864 è una vulnerabilità ALTO (CVSS 8.1) che riguarda firefox (mozilla), thunderbird (mozilla).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.85%, superiore al 58.5% delle vulnerabilità.
Correzione: aggiornare a 115.10.0, 125.0 o successiva.

Package	Affected versions	Patched versions
firefox mozilla	`< 115.10.0< 125.0`	`115.10.0125.0`
thunderbird mozilla	`< 115.10.0`	`115.10.0`

Description

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

References

bugzilla.mozilla.org/show_bug.cgi · Exploit
lists.debian.org/debian-lts-announce/2024/04/msg00012.html · Mailing List
lists.debian.org/debian-lts-announce/2024/04/msg00013.html · Mailing List
mozilla.org/security/advisories/mfsa2024-18 · Vendor Advisory
mozilla.org/security/advisories/mfsa2024-19 · Vendor Advisory
mozilla.org/security/advisories/mfsa2024-20 · Vendor Advisory

Altre vulnerabilità di firefox

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 115.10.0< 125.0

115.10.0125.0

thunderbird

mozilla

< 115.10.0

115.10.0

Description

Altre vulnerabilità di firefox

Vedi tutto →