CRITICALCVSS 9.8KNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2024-9680

CVE-2024-9680 updated by NVD

Published: 2024-10-15
Modified: 2026-09-21
Sources: cisa-kev, nvd

Summary

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-9680

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.