Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:SUSE-SU-2024:3003-1
HistoryAug 23, 2024 - 10:44 a.m.

Security update for MozillaFirefox

2024-08-2310:44:22
Google
osv.dev
mozillafirefox
security update
vulnerabilities
cve-2024-7518
cve-2024-7519
cve-2024-7520
webassembly
out of bounds
use-after-free
indexeddb
esr 128.1.0

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

JSON

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 128.1.0 ESR (MFSA 2024-35, bsc#1228648)

  • CVE-2024-7518: Fullscreen notification dialog can be obscured by document
  • CVE-2024-7519: Out of bounds memory access in graphics shared memory handling
  • CVE-2024-7520: Type confusion in WebAssembly
  • CVE-2024-7521: Incomplete WebAssembly exception handing
  • CVE-2024-7522: Out of bounds read in editor component
  • CVE-2024-7524: CSP strict-dynamic bypass using web-compatibility shims
  • CVE-2024-7525: Missing permission check when creating a StreamFilter
  • CVE-2024-7526: Uninitialized memory used by WebGL
  • CVE-2024-7527: Use-after-free in JavaScript garbage collection
  • CVE-2024-7528: Use-after-free in IndexedDB
  • CVE-2024-7529: Document content could partially obscure security prompts
  • CVE-2024-7531: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel

References

Related

openvas 29
nessus 78
osv 22
ubuntu 5
kaspersky 9
mozilla 9
redhat 24
almalinux 5
oraclelinux 6
redos 3
slackware 3
amazon 1
freebsd 2
mageia 2
rocky 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:3003-1)
2024-08-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2876-1)
2024-08-13 00:00:00
Mozilla Firefox Security Update (mfsa_2024-29) - Mac OS X
2024-07-11 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaFirefox (SUSE-SU-2024:3003-1)
2024-08-25 00:00:00
SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2024:2876-1)
2024-08-13 00:00:00
Mozilla Thunderbird < 128.0
2024-07-16 00:00:00
osv
osv
Security update for MozillaFirefox
2024-08-13 10:01:46
firefox vulnerabilities
2024-07-10 05:51:27
MozillaFirefox-128.0-1.1 on GA media
2024-07-17 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2024-07-10 00:00:00
Firefox regressions
2024-08-21 00:00:00
Firefox vulnerabilities
2024-08-19 00:00:00
kaspersky
kaspersky
KLA70406 Multiple vulnerabilities in Mozilla Firefox
2024-07-09 00:00:00
KLA70478 Multiple vulnerabilities in Mozilla Thunderbird
2024-07-11 00:00:00
KLA71399 Multiple vulnerabilities in Mozilla Firefox ESR
2024-08-06 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 128 — Mozilla
2024-07-09 00:00:00
Security Vulnerabilities fixed in Thunderbird 128 — Mozilla
2024-07-11 00:00:00
Security Vulnerabilities fixed in Firefox ESR 128.1 — Mozilla
2024-08-06 00:00:00
redhat
redhat
(RHSA-2024:5323) Important: firefox security update
2024-08-13 16:11:22
(RHSA-2024:5327) Important: firefox security update
2024-08-13 16:11:46
(RHSA-2024:5329) Important: firefox security update
2024-08-13 16:11:58
almalinux
almalinux
Important: firefox security update
2024-08-14 00:00:00
Important: thunderbird security update
2024-08-14 00:00:00
Important: thunderbird security update
2024-08-14 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2024-08-14 00:00:00
thunderbird security update
2024-08-14 00:00:00
firefox security update
2024-08-14 00:00:00
redos
redos
ROS-20240828-03
2024-08-28 00:00:00
ROS-20240920-11
2024-09-20 00:00:00
ROS-20240902-11
2024-09-02 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2024-08-07 04:09:07
[slackware-security] mozilla-thunderbird
2024-07-23 19:09:25
[slackware-security] mozilla-firefox
2024-07-10 17:52:20
amazon
amazon
Important: thunderbird
2024-08-28 19:04:00
freebsd
freebsd
firefox -- multiple vulnerabilities
2024-08-06 00:00:00
firefox -- multiple vulnerabilities
2024-08-06 00:00:00
mageia
mageia
Updated nss & firefox packages fix security vulnerabilities
2024-07-16 06:21:38
Updated thunderbird packages fix security vulnerabilities
2024-07-21 05:28:06
rocky
rocky
thunderbird security update
2024-07-26 12:33:59

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

JSON
Related for OSV:SUSE-SU-2024:3003-1
openvas29nessus78osv22ubuntu5kaspersky9mozilla9redhat24almalinux5oraclelinux6redos3slackware3amazon1freebsd2mageia2rocky1