CVE-2024-8381 — Type Confusion in Mozilla Firefox
Severity
9.8CRITICALNVD
EPSS
11.6%
top 6.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 3
Latest updateSep 23
Description
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages6 packages
🔴Vulnerability Details
5CVEList▶
CVE-2024-8381: A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment↗2024-09-03
GHSA▶
GHSA-x565-97fv-jfr5: A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment↗2024-09-03
OSV▶
CVE-2024-8381: A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment↗2024-09-03
📋Vendor Advisories
9Red Hat
▶
Debian▶
CVE-2024-8381: firefox - A potentially exploitable type confusion could be triggered when looking up a pr...↗2024