GCVE-110-NCSC-2024-425

Advisory PublishedCVSS 8.2/10

Vulnetix · Advisory published October 30, 2024

Out-of-bounds Read

Weaknesses (CWE)

CWE-416Use After FreeCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-290Authentication Bypass by SpoofingCWE-203Observable DiscrepancyCWE-125Out-of-bounds ReadCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-770Allocation of Resources Without Limits or Throttling

Risk Scores

CVSS 3.1

8.2/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
mozilla	firefox_esr	—	—
mozilla	firefox	—	—
mozilla	thunderbird	—	—

Aliases

CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462 CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467 CVE-2024-10468

References

advisory

Browse GCVE Records

74,496 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON