vulnerability

Ubuntu: (Multiple Advisories) (CVE-2024-7526): Firefox vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:N/A:N)

Published

Aug 6, 2024

Added

Aug 20, 2024

Modified

Mar 27, 2026

Description

ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Solutions

ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird

References

CVE-2024-7526
https://attackerkb.com/topics/CVE-2024-7526
CWE-908
EUVD-EUVD-2024-48433
UBUNTU-USN-6966-1
UBUNTU-USN-6966-2
UBUNTU-USN-6995-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48433

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report