VDB
WID-SEC-W-2024-3138
WID-SEC-W-2024-3138
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Firefox ist ein Open Source Web Browser. Firefox ist ein Open Source Web Browser. ESR ist die Variante mit verlängertem Support.
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla Firefox <131.0.2 | ||
| RESF Rocky Linux | ||
| Mozilla Thunderbird 131.0.1 | ||
| Debian Linux | ||
| IGEL OS 11 | ||
| Mozilla Thunderbird 115.16 | ||
| Amazon Linux 2 | ||
| IGEL OS 12 | ||
| Gentoo Linux | ||
| Mozilla Firefox ESR 115.16.1 | ||
| Mozilla Thunderbird 128.3.1 | ||
| Mozilla Firefox ESR 128.3.1 | ||
| Mozilla Thunderbird <128.3.1 | ||
| Mozilla Firefox ESR <115.16.1 | ||
| Mozilla Firefox ESR <128.3.1 | ||
| Mozilla Thunderbird <131.0.1 | ||
| Mozilla Firefox 131.0.2 | ||
| Mozilla Thunderbird <115.16 | ||
| Red Hat Enterprise Linux | ||
| Oracle Linux |
Timeline
- Oct 9, 2024 CVE Published
- Dec 15, 2024 CVE Updated
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3138.json advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ url
- https://linux.oracle.com/errata/ELSA-2024-7958.html url
- https://lists.debian.org/debian-security-announce/2024/msg00202.html url
- https://ubuntu.com/security/notices/USN-7066-1 url
- https://rhn.redhat.com/errata/RHSA-2024:8024.html url
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/AQJ3XOB6U4CW4OJK2Z23QX2WVYIDVX7K/ url
- https://rhn.redhat.com/errata/RHSA-2024:8026.html url
- https://kb.igel.com/security-safety/current/isn-2024-18-critical-firefox-esr-vulnerability url
- https://access.redhat.com/errata/RHSA-2024:8131 url
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/L4M47743JTWT7EEG3322PW72ONDQWMF6/ url
- https://errata.build.resf.org/RLSA-2024:8024 url
- https://errata.build.resf.org/RLSA-2024:8025 url
- https://alas.aws.amazon.com/AL2/ALASFIREFOX-2024-031.html url
- https://access.redhat.com/errata/RHSA-2024:9552 url
- https://alas.aws.amazon.com/AL2/ALAS-2024-2690.html url
- https://linux.oracle.com/errata/ELSA-2024-9552.html url
- https://linux.oracle.com/errata/ELSA-2024-9554.html url
- https://security.gentoo.org/glsa/202412-04 url
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3138 advisory
…and 23 more