VDB
CVE-2024-8385
CVE-2024-8385
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Firefox ist ein Open Source Web Browser. Firefox ist ein Open Source Web Browser. ESR ist die Variante mit verlängertem Support. Thunderbird ist ein Open Source E-Mail Client.
EPSS 0.58% · 44.3th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.58%
44.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gentoo | Gentoo Linux | |
| Amazon | Amazon Linux 2 | |
| Ubuntu | Ubuntu Linux | |
| Mozilla | Mozilla Firefox ESR <115.15 | |
| Xerox | Xerox FreeFlow Print Server v9 for Solaris | |
| SUSE | SUSE openSUSE | |
| Mozilla | Mozilla Firefox ESR <128.2 | |
| Mozilla | Mozilla Thunderbird <115.15 | |
| Mozilla | Mozilla Thunderbird <128.2 | |
| SUSE | SUSE Linux | |
| RESF | RESF Rocky Linux | |
| Mozilla | Mozilla Firefox <130 | |
| Red Hat | Red Hat Enterprise Linux | |
| Oracle | Oracle Linux | |
| Debian | Debian Linux |
Timeline
- Sep 3, 2024 CVE Published
- Sep 4, 2024 EPSS Score
- Sep 6, 2024 CVE Updated
- Sep 24, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 14, 2024 EPSS Score
- Nov 3, 2024 EPSS Score
- Nov 23, 2024 EPSS Score
- Dec 15, 2024 EPSS Score
- Jan 4, 2025 EPSS Score
- Jan 24, 2025 EPSS Score
- Feb 13, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2038.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2038 advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-39/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-40/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-41/ advisory
- https://security-tracker.debian.org/tracker/DSA-5765-1 advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00012.html advisory
- https://ubuntu.com/security/notices/USN-6992-1 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019386.html advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-43/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/DKFVVQWCU4OVA3BTEAU7Z5JQO5UJO4O3/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-44/ advisory
- https://ubuntu.com/security/notices/USN-6995-1 advisory
- https://lists.debian.org/debian-security-announce/2024/msg00180.html advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00025.html advisory
- https://access.redhat.com/errata/RHSA-2024:6681 advisory
- https://access.redhat.com/errata/RHSA-2024:6683 advisory
- https://access.redhat.com/errata/RHSA-2024:6684 advisory
- https://access.redhat.com/errata/RHSA-2024:6682 advisory
- https://access.redhat.com/errata/RHSA-2024:6721 advisory
…and 28 more