Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjjx-mmjm-vp9r

Опубликовано: 04 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A race during concurrent delazification could have led to a use-after-free. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

A race during concurrent delazification could have led to a use-after-free. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

EPSS

Процентиль: 43%
0.00206
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

A race during concurrent delazification could have led to a use-after-free. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 7.6
redhat
4 месяца назад

A race during concurrent delazification could have led to a use-after-free. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 7.5
nvd
4 месяца назад

A race during concurrent delazification could have led to a use-after-free. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 7.5
debian
4 месяца назад

A race during concurrent delazification could have led to a use-after- ...

CVSS3: 9.8
fstec
5 месяцев назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, Thunderbird ESR, связанная с возможностью использования памяти после освобождения, позволяющая нарушителю оказывать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 43%
0.00206
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416