Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-7521

Опубликовано: 06 авг. 2024
Источник: debian
EPSS Низкий

Описание

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed129.0-1package
firefox-esrfixed115.14.0esr-1package
thunderbirdfixed1:128.1.0esr-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7521

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7521

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-38/#CVE-2024-7521

EPSS

Процентиль: 60%
0.00409
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
11 месяцев назад

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

CVSS3: 8.8
redhat
11 месяцев назад

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

CVSS3: 8.8
nvd
11 месяцев назад

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

CVSS3: 9.8
github
11 месяцев назад

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1.

CVSS3: 9.8
fstec
11 месяцев назад

Уязвимость компонента WebAssembly браузеров Mozilla Firefox, Mozilla Firefox ESR, почтового клиента Mozilla Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 60%
0.00409
Низкий