Dashboard / CVE-2024-9680

CVE-2024-9680

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 5/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.

CISA Known Exploited Vulnerability

Vendor / Product Mozilla — Firefox
Date Added 2024-10-15
Remediation Due 2024-11-05
Ransomware Use CONFIRMED
https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-9680

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
debian debian_linux 11.0
mozilla firefox < 115.16.1
mozilla firefox < 131.0.2
mozilla firefox 128.1.0 – 128.3.1
mozilla thunderbird < 115.16.0
mozilla thunderbird 128.0.1 – 128.3.1
mozilla thunderbird 131.0

References & Advisories (8)

https://bugzilla.mozilla.org/show_bug.cgi?id=1923344
Issue Tracking Permissions Required

Bug Bounty Relevance

5 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

23.18%
Raw Score 0.231840
Percentile 97.8%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links