VDB
CVE-2024-8389
CVE-2024-8389
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Firefox ist ein Open Source Web Browser. Firefox ist ein Open Source Web Browser. ESR ist die Variante mit verlängertem Support. Thunderbird ist ein Open Source E-Mail Client.
EPSS 0.49% · 41.1th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.49%
41.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Linux | |
| Mozilla | Mozilla Thunderbird <128.2 | |
| SUSE | SUSE openSUSE | |
| Mozilla | Mozilla Firefox <130 | |
| Gentoo | Gentoo Linux | |
| Mozilla | Mozilla Thunderbird <115.15 | |
| Amazon | Amazon Linux 2 | |
| SUSE | SUSE Linux | |
| Mozilla | Mozilla Firefox ESR <115.15 | |
| RESF | RESF Rocky Linux | |
| Xerox | Xerox FreeFlow Print Server v9 for Solaris | |
| Ubuntu | Ubuntu Linux | |
| Debian | Debian Linux | |
| Mozilla | Mozilla Firefox ESR <128.2 | |
| Red Hat | Red Hat Enterprise Linux |
Timeline
- Sep 3, 2024 CVE Published
- Sep 3, 2024 PoC Published
- Sep 4, 2024 EPSS Score
- Sep 25, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 16, 2024 EPSS Score
- Nov 5, 2024 EPSS Score
- Nov 26, 2024 EPSS Score
- Dec 18, 2024 EPSS Score
- Jan 8, 2025 EPSS Score
- Jan 12, 2025 CVE Updated
- Jan 29, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2038.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2038 advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-39/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-40/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-41/ advisory
- https://security-tracker.debian.org/tracker/DSA-5765-1 advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00012.html advisory
- https://ubuntu.com/security/notices/USN-6992-1 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019386.html advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-43/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/DKFVVQWCU4OVA3BTEAU7Z5JQO5UJO4O3/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-44/ advisory
- https://ubuntu.com/security/notices/USN-6995-1 advisory
- https://lists.debian.org/debian-security-announce/2024/msg00180.html advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00025.html advisory
- https://access.redhat.com/errata/RHSA-2024:6681 advisory
- https://access.redhat.com/errata/RHSA-2024:6683 advisory
- https://access.redhat.com/errata/RHSA-2024:6684 advisory
- https://access.redhat.com/errata/RHSA-2024:6682 advisory
- https://access.redhat.com/errata/RHSA-2024:6721 advisory
…and 28 more