Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-firefoxalma-upgrade-firefox-x11alma-upgrade-thunderbird | Aug 22, 2024 | Aug 6, 2024 | |
| Alpine Linux | alpine-linux-upgrade-mozjs115alpine-linux-upgrade-thunderbirdalpine-linux-upgrade-firefox-esralpine-linux-upgrade-firefoxalpine-linux-upgrade-mozjs | Oct 1, 2024 | Aug 6, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-firefoxamazon-linux-ami-2-upgrade-firefox-debuginfoamazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo | Sep 6, 2024 | Aug 6, 2024 | |
| Debian | debian-upgrade-firefox-esrdebian-upgrade-thunderbird | Aug 8, 2024 | Aug 6, 2024 | |
| Freebsd | freebsd-upgrade-package-firefox | Aug 14, 2024 | Aug 13, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-spidermonkeygentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Dec 9, 2024 | Aug 6, 2024 | |
| Mfsa2024 33 | mozilla-firefox-upgrade-129_0 | Aug 7, 2024 | Aug 6, 2024 | |
| Mfsa2024 34 | mozilla-firefox-esr-upgrade-115_14 | Aug 7, 2024 | Aug 6, 2024 | |
| Mfsa2024 35 | mozilla-firefox-esr-upgrade-128_1 | Aug 7, 2024 | Aug 6, 2024 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-115_14 | Aug 7, 2024 | Aug 6, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-firefox-x11oracle-linux-upgrade-thunderbird | Oct 16, 2024 | Aug 6, 2024 |
| Redhat_linux | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-firefox-debugsourceredhat-upgrade-firefox-x11redhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource | Aug 22, 2024 | Aug 6, 2024 | |
| Rocky_linux | rocky-upgrade-firefoxrocky-upgrade-firefox-debuginforocky-upgrade-firefox-debugsourcerocky-upgrade-thunderbirdrocky-upgrade-thunderbird-debuginforocky-upgrade-thunderbird-debugsource | May 8, 2025 | Aug 6, 2024 | |
| Suse | — | suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-slesuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | Aug 14, 2024 | Aug 6, 2024 |
| Ubuntu | ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird | Aug 20, 2024 | Aug 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub