Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 15

• Critical 9.8
  CVE-2024-7521

  Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Aug 6, 2024
• Critical 9.8
  CVE-2024-7528

  Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Fi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Wolfi
  Aug 6, 2024
• Critical 9.8
  CVE-2024-7530

  Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Wolfi
  Aug 6, 2024
• Critical 9.1
  CVE-2024-7522

  Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affect…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Aug 6, 2024
• Critical 9.1
  CVE-2024-7525

  It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Aug 6, 2024
• High 8.8
  CVE-2024-7519

  Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Aug 6, 2024
• High 8.8
  CVE-2024-7520

  A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulne…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Wolfi
  Aug 6, 2024
• High 8.8
  CVE-2024-7527

  Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
  Aug 6, 2024
• High 8.1
  CVE-2024-7529

  The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into g…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Aug 6, 2024
• High 7.5
  CVE-2024-7526

  ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Aug 6, 2024
• High 7.5
  CVE-2024-8900

  An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigatio…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Sep 17, 2024
• Medium 6.5
  CVE-2024-7518

  Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a sp…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Wolfi
  Aug 6, 2024
• Medium 6.3
  CVE-2024-7523

  A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into g…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Wolfi
  Aug 6, 2024
• Medium 6.3
  CVE-2024-7531

  Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on …

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu Wolfi
  Aug 6, 2024
• Medium 6.1
  CVE-2024-7524

  Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a si…

  Mozilla Firefox Firefox ESR mozjs38 Browsers Debian Ubuntu Wolfi
  Aug 6, 2024

Revision history

1. 2025-11-17 #28

   Neue Updates von XEROX aufgenommen

2. 2025-05-13 #27

   Neue Updates von Gentoo aufgenommen

3. 2025-03-09 #26

   Neue Updates von Amazon aufgenommen

4. 2025-03-02 #25

   Neue Updates von Amazon aufgenommen

5. 2025-02-25 #24

   Neue Updates von Amazon aufgenommen

6. 2024-12-15 #23

   Neue Updates von openSUSE aufgenommen

7. 2024-12-08 #22

   Neue Updates von Gentoo aufgenommen

8. 2024-10-14 #21

   Neue Updates von SUSE aufgenommen

9. 2024-10-13 #20

   Neue Updates von openSUSE und SUSE aufgenommen

10. 2024-10-08 #19

    Neue Updates von Red Hat aufgenommen

11. 2024-10-07 #18

    Neue Updates von Oracle Linux aufgenommen

12. 2024-10-06 #17

    Neue Updates von Red Hat aufgenommen

13. 2024-10-01 #16

    Neue Updates von SUSE aufgenommen

14. 2024-09-26 #15

    Neue Updates von Oracle Linux aufgenommen

15. 2024-09-18 #14

    Neue Updates von Amazon aufgenommen

16. 2024-09-17 #13

    CVE ergänzt

17. 2024-09-08 #12

    Neue Updates von Ubuntu aufgenommen

18. 2024-09-05 #11

    Neue Updates von Amazon aufgenommen

19. 2024-09-03 #10

    Neue Updates von SUSE aufgenommen

20. 2024-08-25 #9

    Neue Updates von SUSE aufgenommen

21. 2024-08-20 #8

    Neue Updates von Ubuntu aufgenommen

22. 2024-08-18 #7

    Neue Updates von Red Hat aufgenommen

23. 2024-08-15 #6

    Neue Updates von Red Hat aufgenommen

24. 2024-08-14 #5

    Neue Updates von Red Hat und Oracle Linux aufgenommen

25. 2024-08-13 #4

    Neue Updates von Oracle Linux aufgenommen

References

• Mozilla Foundation Security Advisory vom 2024-08-06
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/
• Mozilla Foundation Security Advisory vom 2024-08-06
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/
• Mozilla Foundation Security Advisory vom 2024-08-06
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-35/
• Mozilla Foundation Security Advisory vom 2024-08-06
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-37/
• Mozilla Foundation Security Advisory vom 2024-08-06
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-38/
• Debian Security Advisory DSA-5740 vom 2024-08-07
  https://lists.debian.org/debian-security-announce/2024/msg00152.html
• Debian Security Advisory DSA-5744 vom 2024-08-08
  https://lists.debian.org/debian-security-announce/2024/msg00156.html
• SUSE Security Update SUSE-SU-2024:2876-1 vom 2024-08-12
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019176.html
• Oracle Linux Security Advisory ELSA-2024-5322 vom 2024-08-14
  https://linux.oracle.com/errata/ELSA-2024-5322.html
• Red Hat Security Advisory RHSA-2024:5328 vom 2024-08-14
  https://access.redhat.com/errata/RHSA-2024:5328
• Red Hat Security Advisory RHSA-2024:5327 vom 2024-08-14
  https://access.redhat.com/errata/RHSA-2024:5327
• Red Hat Security Advisory RHSA-2024:5325 vom 2024-08-14
  https://access.redhat.com/errata/RHSA-2024:5325
• Red Hat Security Advisory RHSA-2024:5326 vom 2024-08-14
  https://access.redhat.com/errata/RHSA-2024:5326
• Red Hat Security Advisory RHSA-2024:5324 vom 2024-08-14
  https://access.redhat.com/errata/RHSA-2024:5324
• Red Hat Security Advisory RHSA-2024:5329 vom 2024-08-14
  https://access.redhat.com/errata/RHSA-2024:5329
• Red Hat Security Advisory RHSA-2024:5323 vom 2024-08-14
  https://access.redhat.com/errata/RHSA-2024:5323
• Red Hat Security Advisory RHSA-2024:5391 vom 2024-08-15
  https://access.redhat.com/errata/RHSA-2024:5391
• Red Hat Security Advisory RHSA-2024:5392 vom 2024-08-15
  https://access.redhat.com/errata/RHSA-2024:5392
• Oracle Linux Security Advisory ELSA-2024-5392 vom 2024-08-15
  https://linux.oracle.com/errata/ELSA-2024-5392.html
• Oracle Linux Security Advisory ELSA-2024-5391 vom 2024-08-14
  https://linux.oracle.com/errata/ELSA-2024-5391.html
• Red Hat Security Advisory RHSA-2024:5402 vom 2024-08-15
  https://access.redhat.com/errata/RHSA-2024:5402
• Red Hat Security Advisory RHSA-2024:5396 vom 2024-08-15
  https://access.redhat.com/errata/RHSA-2024:5396
• Red Hat Security Advisory RHSA-2024:5395 vom 2024-08-15
  https://access.redhat.com/errata/RHSA-2024:5395
• Red Hat Security Advisory RHSA-2024:5394 vom 2024-08-15
  https://access.redhat.com/errata/RHSA-2024:5394
• Red Hat Security Advisory RHSA-2024:5393 vom 2024-08-15
  https://access.redhat.com/errata/RHSA-2024:5393
• Oracle Linux Security Advisory ELSA-2024-5402 vom 2024-08-15
  https://linux.oracle.com/errata/ELSA-2024-5402.html
• Red Hat Security Advisory RHSA-2024:5322 vom 2024-08-15
  https://access.redhat.com/errata/RHSA-2024:5322
• Red Hat Security Advisory RHSA-2024:5527 vom 2024-08-19
  https://access.redhat.com/errata/RHSA-2024:5527
• Red Hat Security Advisory RHSA-2024:5528 vom 2024-08-19
  https://access.redhat.com/errata/RHSA-2024:5528
• Ubuntu Security Notice USN-6966-1 vom 2024-08-19
  https://ubuntu.com/security/notices/USN-6966-1
• Ubuntu Security Notice USN-6966-2 vom 2024-08-21
  https://ubuntu.com/security/notices/USN-6966-2
• SUSE Security Update SUSE-SU-2024:3003-1 vom 2024-08-23
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019304.html
• SUSE Security Update SUSE-SU-2024:3112-1 vom 2024-09-03
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019353.html
• Amazon Linux Security Advisory ALAS-2024-2629 vom 2024-09-05
  https://alas.aws.amazon.com/AL2/ALAS-2024-2629.html
• Ubuntu Security Notice USN-6995-1 vom 2024-09-09
  https://ubuntu.com/security/notices/USN-6995-1
• Amazon Linux Security Advisory ALASFIREFOX-2024-030 vom 2024-09-18
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2024-030.html
• Oracle Linux Security Advisory ELSA-2024-5324 vom 2024-09-26
  https://linux.oracle.com/errata/ELSA-2024-5324.html
• SUSE Security Update SUSE-SU-2024:3507-1 vom 2024-10-01
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LGSRZTILBCJ2M5GOJ5QXOW6BPA3NQ4MR/
• SUSE Security Update SUSE-SU-2024:3507-1 vom 2024-10-01
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LGSRZTILBCJ2M5GOJ5QXOW6BPA3NQ4MR/
• SUSE Security Update SUSE-SU-2024:3507-1 vom 2024-10-01
  https://lists.suse.com/pipermail/sle-security-updates/2024-October/019538.html
• Red Hat Security Advisory RHSA-2024:7702 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7702
• Red Hat Security Advisory RHSA-2024:7704 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7704
• Red Hat Security Advisory RHSA-2024:7703 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7703
• Red Hat Security Advisory RHSA-2024:7700 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7700
• Oracle Linux Security Advisory ELSA-2024-7700 vom 2024-10-07
  https://linux.oracle.com/errata/ELSA-2024-7700.html
• Red Hat Security Advisory RHSA-2024:7842 vom 2024-10-09
  https://access.redhat.com/errata/RHSA-2024:7842
• openSUSE Security Update OPENSUSE-SU-2024:14397-1 vom 2024-10-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5WJZTJUW6SGUZACDHTJJMLUGZL7BRNQV/
• openSUSE Security Update OPENSUSE-SU-2024:14394-1 vom 2024-10-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WA4S63AHEQ76BYNIIRG5P4KRDT5XUJR4/
• SUSE Security Update SUSE-SU-2024:3603-1 vom 2024-10-11
  https://lists.suse.com/pipermail/sle-security-updates/2024-October/019592.html
• SUSE Security Update SUSE-SU-2024:3614-1 vom 2024-10-14
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VKFD7S6F6RRLVUZWNFLQRZFCCQWLS5QT/
• SUSE Security Update SUSE-SU-2024:3629-1 vom 2024-10-15
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/AQJ3XOB6U4CW4OJK2Z23QX2WVYIDVX7K/
• Gentoo Linux Security Advisory GLSA-202412-06 vom 2024-12-07
  https://security.gentoo.org/glsa/202412-06
• Gentoo Linux Security Advisory GLSA-202412-04 vom 2024-12-07
  https://security.gentoo.org/glsa/202412-04
• Gentoo Linux Security Advisory GLSA-202412-13 vom 2024-12-08
  https://security.gentoo.org/glsa/202412-13
• openSUSE Security Update OPENSUSE-SU-2024:14572-1 vom 2024-12-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/
• Amazon Linux Security Advisory ALASFIREFOX-2025-034 vom 2025-02-25
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2025-034.html
• Amazon Linux Security Advisory ALAS-2025-2765 vom 2025-02-25
  https://alas.aws.amazon.com/AL2/ALAS-2025-2765.html
• Amazon Linux Security Advisory ALASFIREFOX-2025-035 vom 2025-03-01
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2025-035.html
• Amazon Linux Security Advisory ALAS-2025-2789 vom 2025-03-07
  https://alas.aws.amazon.com/AL2/ALAS-2025-2789.html
• Gentoo Linux Security Advisory GLSA-202505-08 vom 2025-05-14
  https://security.gentoo.org/glsa/202505-08
• XEROX Security Advisory XRX25-018 vom 2025-11-18
  https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf