vulnerability

MFSA2024-20 Thunderbird: Security Vulnerabilities fixed in Thunderbird 115.10 (CVE-2024-3852)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:H/Au:N/C:C/I:C/A:C)

Published

Apr 16, 2024

Added

Apr 22, 2024

Modified

Mar 27, 2026

Description

GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

Solution

mozilla-thunderbird-upgrade-115_10

References

CVE-2024-3852
https://attackerkb.com/topics/CVE-2024-3852
CWE-386
EUVD-EUVD-2024-32420
http://www.mozilla.org/security/announce/2024/mfsa2024-20.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-32420

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report