Critical DLA-3869-1 4 CVEs

firefox-esr - security update

Published Sep 4, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	firefox-esr	115.15.0esr-1~deb11u1

Vulnerabilities 4

Critical 9.8

CVE-2024-8381 Public exploit

A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi

Sep 3, 2024
Critical 9.8

CVE-2024-8384

The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi

Sep 3, 2024
High 8.8

CVE-2024-8382

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for t…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi

Sep 3, 2024
High 7.5

CVE-2024-8383

Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme tha…

Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu Wolfi

Sep 3, 2024