Firetruck

CVE-2024-9680

KEV · Ransomware
Updated Aug 4, 2026 · PUBLISHED
View KEV entry →

Description

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
firefoxmozilla / firefox>= 0, < 131.0.2affected
FirefoxMozilla / Firefox>= unspecified, < 131.0.2affected
firefox_esrmozilla / firefox_esr>= 0, < 115.16.1affected
firefox_esrmozilla / firefox_esr>= 0, < 128.3.1affected
firefox_esrmozilla / firefox_esr>= 0, < 115.16.1affected
firefox_esrmozilla / firefox_esr>= 0, < 128.3.1affected
Firefox ESRMozilla / Firefox ESR>= unspecified, < 115.16.1affected
Firefox ESRMozilla / Firefox ESR>= unspecified, < 128.3.1affected
thunderbirdmozilla / thunderbird>= 0, < 128.3.1affected
thunderbirdmozilla / thunderbird>= 0, < 115.16.0affected
thunderbirdmozilla / thunderbird>= 0, < 131.0.1affected
thunderbirdmozilla / thunderbird>= 0, < 128.3.1affected
thunderbirdmozilla / thunderbird>= 0, < 131.0.1affected
thunderbirdmozilla / thunderbird>= 0, < 128.3.1affected
thunderbirdmozilla / thunderbird>= 0, < 115.16.0affected
thunderbirdmozilla / thunderbird>= 0, < 115.16.0affected
thunderbirdmozilla / thunderbird>= 0, < 131.0.1affected
ThunderbirdMozilla / Thunderbird>= unspecified, < 131.0.1affected
ThunderbirdMozilla / Thunderbird>= unspecified, < 128.3.1affected
ThunderbirdMozilla / Thunderbird>= unspecified, < 115.16.0affected