Arbitrary JavaScript Execution Vulnerability Affects Firefox < 124.0.1 and Firefox ESR < 115.9.1
Key Information
- Vendor
- Mozilla
- Status
- Firefox
- Firefox Esr
- Vendor
- CVE Published:
- 22 March 2024
Badges
Summary
An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox < 124.0.1 and Firefox ESR < 115.9.1.
Affected Version(s)
Firefox < 124.0.1
Firefox ESR < 115.9.1
News Articles
unSafe.sh CVE-2024-29943CVE-2024-29944Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024
Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024
8 months ago
Security Affairs CVE-2024-29943CVE-2024-29944Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024
Google addressed two zero-day vulnerabilities in the Chrome web browser that have been demonstrated during the Pwn2Own Vancouver 2024.
8 months ago
CybersecurityNews CVE-2024-29944CVE-2024-299432 Firefox Zero-Days Exploited At Pwn2Own : Patch Now
Mozilla addresses two zero-day vulnerabilities that were recently exploited at the Pwn2Own Vancouver 2024 hacking contest in the Firefox
8 months ago
Timeline
- 👾
Exploit exists.
First article discovered by securityonline.info
Vulnerability published.
Vulnerability Reserved.