CVE-2024-9680

Summary

CVE-2024-9680 is a use-after-free vulnerability in Firefox and Thunderbird's Animation timelines. An attacker can exploit this flaw to achieve code execution in the content process. This vulnerability has been reported to be actively exploited in the wild. Affected versions include Firefox below 131.0.2, Firefox ESR below 128.3.1, Firefox ESR below 115.16.1, Thunderbird below 131.0.1, Thunderbird below 128.3.1, and Thunderbird below 115.16.0. Users are strongly advised to update their browsers as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.