Mozilla Warns of Vulnerability in Firefox and Thunderbird
CVE-2024-9392

9.8CRITICAL

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
1 October 2024

What is CVE-2024-9392?

A security flaw has been identified in Mozilla's Firefox and Thunderbird applications, where an attacker could exploit a compromised content process. This could permit the arbitrary loading of cross-origin web pages, potentially leading to unauthorized data access or manipulation. Users of affected Firefox and Thunderbird versions are advised to update their software to protect against this vulnerability and ensure the integrity of their data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Firefox < 131

Firefox ESR < 128.3

Firefox ESR < 115.16

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1899154
https://bugzilla.mozilla.org/show_bug.cgi?id=1905843
https://www.mozilla.org/security/advisories/mfsa2024-46/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jan Drescher and David Klein from IAS, TU Braunschweig
JSON
.