coldbraid

CVE-2024-9680 Mozilla Firefox

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.

CVSS
not scored

CWE-416

On CISA’s exploited list

Mozilla Firefox Use-After-Free Vulnerability

Added
2024-10-15
Federal patch deadline
2024-11-05
Ransomware use
known