PoC Index

CVE-2024-9680

KEV RANSOMWARECRITICAL 9.8EPSS 23.2%

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
23.18% chance of exploitation in the next 30 days, 98th percentile
CISA KEV
added 2024-10-15, used in ransomware campaigns
Published
2024-10-09
Updated
2026-08-04

Proof-of-concept exploits (2)

References

Related