Record status Published
Identifier year (not publication year) 2024
Source publication Oct 9, 2024
Source updated Aug 4, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Firefox
Vendor Mozilla
Product Firefox
Platforms Unknown
Default status Unknown
Firefox · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 131.0.2 Unavailable None listed
Firefox ESR
Vendor Mozilla
Product Firefox ESR
Platforms Unknown
Default status Unknown
Firefox ESR · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 128.3.1 Unavailable None listed
Firefox ESR
Vendor Mozilla
Product Firefox ESR
Platforms Unknown
Default status Unknown
Firefox ESR · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 115.16.1 Unavailable None listed
Thunderbird
Vendor Mozilla
Product Thunderbird
Platforms Unknown
Default status Unknown
Thunderbird · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 131.0.1 Unavailable None listed
Thunderbird
Vendor Mozilla
Product Thunderbird
Platforms Unknown
Default status Unknown
Thunderbird · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 128.3.1 Unavailable None listed
Thunderbird
Vendor Mozilla
Product Thunderbird
Platforms Unknown
Default status Unknown
Thunderbird · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 115.16.0 Unavailable None listed