1. Home
  2. Vulnerabilities
  3. CVE-2024-8387

CVE-2024-8387

CVSS v3.1 9.8 (Critical)
98% Progress
EPSS 0.07 % (30th)
0.07% Progress
Affected Products 3
Advisories 7
NVD Status Modified
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

Weaknesses
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787
Out-of-bounds Write
CVE Status
PUBLISHED
NVD Status
Modified
CNA
Mozilla Corporation
Published Date
2024-09-03 13:15:05
(13 days ago)
Updated Date
2024-09-06 17:15:18
(10 days ago)

Affected Products

Mozilla

Configuration #1

    CPE23 From Up To
  Mozilla Firefox 129.0 cpe:2.3:a:mozilla:firefox:129.0
  Mozilla Firefox Esr 128.1 cpe:2.3:a:mozilla:firefox_esr:128.1
  Mozilla Thunderbird 128.1 cpe:2.3:a:mozilla:thunderbird:128.1