Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 14

• Critical 9.8
  CVE-2024-9392

  A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability af…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• Critical 9.8
  CVE-2024-9401

  Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• Critical 9.8
  CVE-2024-9402

  Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• High 8.8
  CVE-2024-9396

  It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain ob…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• High 8.8
  CVE-2024-9400

  A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a sp…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• High 7.5
  CVE-2024-8900

  An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigatio…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Sep 17, 2024
• High 7.5
  CVE-2024-9393

  An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.j…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• High 7.5
  CVE-2024-9399

  A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• High 7.3
  CVE-2024-9403

  Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that …

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Oct 1, 2024
• Medium 6.5
  CVE-2024-9391

  A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full sc…

  Mozilla Firefox firefox Browsers Wolfi
  Oct 1, 2024
• Medium 6.1
  CVE-2024-9394

  An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devto…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• Medium 6.1
  CVE-2024-9397

  A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permis…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024
• Medium 5.3
  CVE-2024-9395

  A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in t…

  Mozilla Firefox firefox Browsers Wolfi
  Oct 1, 2024
• Medium 5.3
  CVE-2024-9398

  By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine i…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 1, 2024

Revision history

1. 2026-02-02 #23

   Neue Updates von Ubuntu aufgenommen

2. 2025-05-13 #22

   Neue Updates von Gentoo aufgenommen

3. 2025-03-09 #21

   Neue Updates von Amazon aufgenommen

4. 2025-03-02 #20

   Neue Updates von Amazon aufgenommen

5. 2025-02-25 #19

   Neue Updates von Amazon aufgenommen

6. 2024-12-15 #18

   Neue Updates von openSUSE aufgenommen

7. 2024-12-08 #17

   Neue Updates von Gentoo aufgenommen

8. 2024-11-17 #16

   Neue Updates von Amazon aufgenommen

9. 2024-10-31 #15

   Neue Updates von Amazon aufgenommen

10. 2024-10-27 #14

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

11. 2024-10-24 #13

    Neue Updates von Oracle Linux aufgenommen

12. 2024-10-22 #12

    Neue Updates von Fedora aufgenommen

13. 2024-10-17 #11

    Neue Updates von Fedora aufgenommen

14. 2024-10-15 #10

    Neue Updates von Red Hat aufgenommen

15. 2024-10-14 #9

    Neue Updates von SUSE aufgenommen

16. 2024-10-13 #8

    Neue Updates von Debian, openSUSE und SUSE aufgenommen

17. 2024-10-10 #7

    Neue Updates von Fedora aufgenommen

18. 2024-10-09 #6

    Neue Updates von Red Hat aufgenommen

19. 2024-10-08 #5

    Neue Updates von Fedora und Debian aufgenommen

20. 2024-10-07 #4

    Neue Updates von openSUSE und Oracle Linux aufgenommen

21. 2024-10-06 #3

    Neue Updates von Red Hat, Debian und Ubuntu aufgenommen

22. 2024-10-03 #2

    Neue Updates von Oracle Linux, Red Hat und SUSE aufgenommen

23. 2024-10-01 #1

    Initiale Fassung

References

• Mozilla Foundation Security Advisory vom 2024-10-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-46/
• Mozilla Foundation Security Advisory vom 2024-10-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-47/
• Mozilla Foundation Security Advisory vom 2024-10-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-48/
• Mozilla Foundation Security Advisory vom 2024-10-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-49/
• Mozilla Foundation Security Advisory vom 2024-10-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-50/
• Oracle Linux Security Advisory ELSA-2024-7552 vom 2024-10-03
  https://linux.oracle.com/errata/ELSA-2024-7552.html
• Red Hat Security Advisory RHSA-2024:7646 vom 2024-10-03
  https://access.redhat.com/errata/RHSA-2024:7646
• Red Hat Security Advisory RHSA-2024:7622 vom 2024-10-03
  https://access.redhat.com/errata/RHSA-2024:7622
• SUSE Security Update SUSE-SU-2024:3519-1 vom 2024-10-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BXPKEHR77DBH2XSXNUUKH5PSHJO2DNX2/
• SUSE Security Update SUSE-SU-2024:3518-1 vom 2024-10-03
  https://lists.suse.com/pipermail/sle-security-updates/2024-October/019547.html
• Oracle Linux Security Advisory ELSA-2024-7505 vom 2024-10-03
  http://linux.oracle.com/errata/ELSA-2024-7505.html
• Red Hat Security Advisory RHSA-2024:7505 vom 2024-10-02
  https://access.redhat.com/errata/RHSA-2024:7505
• Red Hat Security Advisory RHSA-2024:7552 vom 2024-10-02
  https://access.redhat.com/errata/RHSA-2024:7552
• Red Hat Security Advisory RHSA-2024:7621 vom 2024-10-03
  https://access.redhat.com/errata/RHSA-2024:7621
• SUSE Security Update SUSE-SU-2024:3519-1 vom 2024-10-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/BXPKEHR77DBH2XSXNUUKH5PSHJO2DNX2/
• Red Hat Security Advisory RHSA-2024:7702 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7702
• Red Hat Security Advisory RHSA-2024:7703 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7703
• Red Hat Security Advisory RHSA-2024:7699 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7699
• Red Hat Security Advisory RHSA-2024:7700 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7700
• Red Hat Security Advisory RHSA-2024:7704 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7704
• Debian Security Advisory DSA-5783 vom 2024-10-04
  https://lists.debian.org/debian-security-announce/2024/msg00196.html
• Ubuntu Security Notice USN-7056-1 vom 2024-10-07
  https://ubuntu.com/security/notices/USN-7056-1
• openSUSE Security Update OPENSUSE-SU-2024:14385-1 vom 2024-10-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/N4JP3GXA5W44ZPKFH3YRRO2ZB77WGE4V/
• Oracle Linux Security Advisory ELSA-2024-7700 vom 2024-10-07
  https://linux.oracle.com/errata/ELSA-2024-7700.html
• Oracle Linux Security Advisory ELSA-2024-7699 vom 2024-10-07
  https://linux.oracle.com/errata/ELSA-2024-7699.html
• Fedora Security Advisory FEDORA-2024-DBD796F3CB vom 2024-10-08
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-dbd796f3cb
• Fedora Security Advisory FEDORA-2024-8F6C5F592D vom 2024-10-08
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-8f6c5f592d
• Debian Security Advisory DLA-3913 vom 2024-10-08
  https://lists.debian.org/debian-lts-announce/2024/10/msg00004.html
• Red Hat Security Advisory RHSA-2024:7842 vom 2024-10-09
  https://access.redhat.com/errata/RHSA-2024:7842
• Red Hat Security Advisory RHSA-2024:7855 vom 2024-10-09
  https://access.redhat.com/errata/RHSA-2024:7855
• Red Hat Security Advisory RHSA-2024:7854 vom 2024-10-09
  https://access.redhat.com/errata/RHSA-2024:7854
• Red Hat Security Advisory RHSA-2024:7856 vom 2024-10-09
  https://access.redhat.com/errata/RHSA-2024:7856
• Red Hat Security Advisory RHSA-2024:7853 vom 2024-10-09
  https://access.redhat.com/errata/RHSA-2024:7853
• Fedora Security Advisory FEDORA-2024-5B8CFA7937 vom 2024-10-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-5b8cfa7937
• Fedora Security Advisory FEDORA-2024-86CE15BF13 vom 2024-10-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-86ce15bf13
• Debian Security Advisory DLA-3916 vom 2024-10-12
  https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html
• openSUSE Security Update OPENSUSE-SU-2024:14394-1 vom 2024-10-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WA4S63AHEQ76BYNIIRG5P4KRDT5XUJR4/
• openSUSE Security Update OPENSUSE-SU-2024:14397-1 vom 2024-10-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/5WJZTJUW6SGUZACDHTJJMLUGZL7BRNQV/
• openSUSE Security Update OPENSUSE-SU-2024:14397-1 vom 2024-10-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5WJZTJUW6SGUZACDHTJJMLUGZL7BRNQV/
• Debian Security Advisory DSA-5789 vom 2024-10-12
  https://lists.debian.org/debian-security-announce/2024/msg00203.html
• SUSE Security Update SUSE-SU-2024:3603-1 vom 2024-10-11
  https://lists.suse.com/pipermail/sle-security-updates/2024-October/019592.html
• SUSE Security Update SUSE-SU-2024:3614-1 vom 2024-10-14
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VKFD7S6F6RRLVUZWNFLQRZFCCQWLS5QT/
• SUSE Security Update SUSE-SU-2024:3629-1 vom 2024-10-15
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/AQJ3XOB6U4CW4OJK2Z23QX2WVYIDVX7K/
• Red Hat Security Advisory RHSA-2024:8166 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8166
• Red Hat Security Advisory RHSA-2024:8169 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8169
• Fedora Security Advisory FEDORA-2024-884A589289 vom 2024-10-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-884a589289
• Fedora Security Advisory FEDORA-2024-A078D86829 vom 2024-10-23
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-a078d86829
• Oracle Linux Security Advisory ELSA-2024-7702 vom 2024-10-25
  https://linux.oracle.com/errata/ELSA-2024-7702.html
• Rocky Linux Security Advisory RLSA-2024:7700 vom 2024-10-25
  https://errata.build.resf.org/RLSA-2024:7700
• Rocky Linux Security Advisory RLSA-2024:7699 vom 2024-10-25
  https://errata.build.resf.org/RLSA-2024:7699
• Amazon Linux Security Advisory ALASFIREFOX-2024-031 vom 2024-10-31
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2024-031.html
• Amazon Linux Security Advisory ALAS-2024-2690 vom 2024-11-15
  https://alas.aws.amazon.com/AL2/ALAS-2024-2690.html
• Gentoo Linux Security Advisory GLSA-202412-06 vom 2024-12-07
  https://security.gentoo.org/glsa/202412-06
• Gentoo Linux Security Advisory GLSA-202412-04 vom 2024-12-07
  https://security.gentoo.org/glsa/202412-04
• openSUSE Security Update OPENSUSE-SU-2024:14572-1 vom 2024-12-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/
• Amazon Linux Security Advisory ALAS-2025-2765 vom 2025-02-25
  https://alas.aws.amazon.com/AL2/ALAS-2025-2765.html
• Amazon Linux Security Advisory ALASFIREFOX-2025-034 vom 2025-02-25
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2025-034.html
• Amazon Linux Security Advisory ALASFIREFOX-2025-035 vom 2025-03-01
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2025-035.html
• Amazon Linux Security Advisory ALAS-2025-2789 vom 2025-03-07
  https://alas.aws.amazon.com/AL2/ALAS-2025-2789.html
• Gentoo Linux Security Advisory GLSA-202505-08 vom 2025-05-14
  https://security.gentoo.org/glsa/202505-08
• Ubuntu Security Notice USN-7991-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-7991-1