GCVE-110-NCSC-2024-218

Advisory PublishedCVSS 6.1/10

Vulnetix · Advisory published May 15, 2024

Mozilla heeft kwetsbaarheden verholpen in Firefox en Thunderbird

Weaknesses (CWE)

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-416Use After FreeCWE-829Inclusion of Functionality from Untrusted Control SphereCWE-451User Interface (UI) Misrepresentation of Critical InformationCWE-212Improper Removal of Sensitive Information Before Storage or TransferCWE-754Improper Check for Unusual or Exceptional Conditions

Risk Scores

CVSS 3.1

6.1/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
mozilla	firefox_esr	—	—
mozilla	firefox	—	—
mozilla	thunderbird	—	—

Aliases

CVE-2024-4367 CVE-2024-4764 CVE-2024-4765 CVE-2024-4766 CVE-2024-4767 CVE-2024-4768 CVE-2024-4769 CVE-2024-4770 CVE-2024-4771 CVE-2024-4772 CVE-2024-4773 CVE-2024-4774 CVE-2024-4775 CVE-2024-4776 CVE-2024-4777 CVE-2024-4778

References

advisory

Browse GCVE Records

74,267 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON