← KEV catalog
CISA known exploited vulnerability

CVE-2024-9680

Mozilla Firefox Use-After-Free Vulnerability

SOURCE FACT

Mozilla · Firefox

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA notes

https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-9680

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?