A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefox-x11Upgrade firefoxUpgrade thunderbird | Oct 7, 2024 | Oct 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade thunderbird | Nov 4, 2024 | Oct 1, 2024 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esr | Oct 7, 2024 | Oct 1, 2024 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-esr | Oct 5, 2024 | Oct 3, 2024 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade dev-lang/spidermonkey.Upgrade www-client/firefox. | Dec 9, 2024 | Oct 1, 2024 |
| Mfsa2024 46 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 131.0 | Oct 2, 2024 | Oct 1, 2024 |
| Mfsa2024 47 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 128.3 | Oct 2, 2024 | Oct 1, 2024 |
| Mfsa2024 48 | — | Upgrade to Mozilla Firefox ESR version 115.16Upgrade to the latest version of Mozilla Firefox | Oct 2, 2024 | Oct 1, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 131.0Upgrade to the latest version of Mozilla Thunderbird | Oct 2, 2024 | Oct 1, 2024 |
| Oracle_linux | — | Upgrade firefox-x11Upgrade thunderbirdUpgrade firefox | Oct 16, 2024 | Oct 1, 2024 |
| Redhat_linux | — | Upgrade firefox-x11Upgrade thunderbird-debuginfoUpgrade thunderbirdNo solution existsUpgrade firefox-debuginfoUpgrade firefoxUpgrade firefox-debugsourceUpgrade thunderbird-debugsource | Oct 7, 2024 | Oct 1, 2024 |
| Rocky_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade thunderbird-debugsourceUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debuginfo | Nov 4, 2024 | Oct 1, 2024 |
| Suse | — | Upgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefoxUpgrade libmozjs-128-0Upgrade MozillaFirefox-translations-commonUpgrade mozjs128-develUpgrade MozillaThunderbird-translations-otherUpgrade mozjs128Upgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade mozillafirefox-branding-upstream | Dec 31, 2024 | Oct 1, 2024 |
| Ubuntu | — | Upgrade firefox | Oct 8, 2024 | Oct 1, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub