CVE-2024-9680: Mozilla Firefox Use-After-Free Vulnerability. Mozilla
Mozilla Firefox Use-After-Free Vulnerability. Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.
- CISA KEV-listed (remediation due 2024-11-05)
- used in ransomware campaigns
- EPSS 30.8% (96.8% percentile)