CVE-2024-10459

Severity CVSS v4.0:
Pending analysis
Type:
CWE-416 Use After Free
Publication date:
29/10/2024
Last modified:
31/10/2024

Description

An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* 115.17 (excluding)
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* 132.0 (excluding)
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* 116.0 (including) 128.4.0 (excluding)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* 128.4.0 (excluding)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* 129.0 (including) 132.0 (excluding)