Every CVE Search/ Get API key

CVE-2024-9403

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...

7.3 HighFix available

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.45%Up 0.4 points since Oct 2, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.3

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

Record
CVE-2024-9403
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-119
Updated
2026-11-02
EUVDEUVD-2024-49918 7.3

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

Record
EUVD-2024-49918
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-94mm-6r76-6pgh 7.3

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory...

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

Record
GHSA-94mm-6r76-6pgh
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-119
Updated
2026-11-02
NVD 7.3

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

Record
CVE-2024-9403
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-119
Updated
2026-11-02
OSVRHSA-2024:7552 7.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2024:7552
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7621 7.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2024:7621
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
Show 21 moreShow less
OSVRHSA-2024:7622 7.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2024:7622
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7646 7.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2024:7646
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7699 7.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2024:7699
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7702 7.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2024:7702
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7703 7.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2024:7703
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7704 7.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2024:7704
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7842 7.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2024:7842
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7853 7.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2024:7853
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7854 7.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2024:7854
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7855 7.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2024:7855
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:7856 7.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2024:7856
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:8166 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2024:8166
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:8169 7.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2024:8169
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2024-9403 7.3

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

Record
UBUNTU-CVE-2024-9403
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVALSA-2024:7552 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • thunderbird: 115.16/128.3 ()
  • firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403)
  • firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402)
  • firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398)
  • firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400)
  • firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396)
  • firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393)
  • firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394)
  • firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:7552
Updated
2026-11-02
OSVALSA-2024:7699 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • thunderbird: 115.16/128.3 ()
  • firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403)
  • firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402)
  • firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398)
  • firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400)
  • firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396)
  • firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393)
  • firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394)
  • firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:7699
Updated
2026-11-06
OSVALSA-2024:7700 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: 115.16/128.3 ESR ()
  • firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403)
  • firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402)
  • firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398)
  • firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400)
  • firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396)
  • firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393)
  • firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394)
  • firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:7700
Updated
2026-11-06
OSVopenSUSE-SU-2024:14385-1 No score

MozillaFirefox-131.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-131.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14385-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11373-1 No score

firefox-esr-153.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11373-1
Updated
2026-11-02
OSVRLSA-2024:7699 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • thunderbird: 115.16/128.3 ()

  • firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403)

  • firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402)

  • firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398)

  • firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400)

  • firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396)

  • firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393)

  • firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394)

  • firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:7699
Updated
2026-11-02
OSVUSN-7056-1 No score

firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-9392, CVE-2024-9396, CVE-2024-9397, CVE-2024-9398, CVE-2024-9399, CVE-2024-9400, CVE-2024-9401, CVE-2024-9402, CVE-2024-9403)

Masato Kinugawa discovered that Firefox did not properly validate javascript under the "resource://pdf.js" origin. An attacker could potentially exploit this issue to execute arbitrary javascript code and access cross-origin PDF content. (CVE-2024-9393)

Masato Kinugawa discovered that Firefox did not properly validate javascript under the "resource://devtools" origin. An attacker could potentially exploit this issue to execute arbitrary javascript code and access cross-origin JSON content. (CVE-2024-9394)

Record
USN-7056-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
thunderbird
AlmaLinux:9
From an advisory covering 11 CVEs
 before 128.3.0-1.el9_4.alma.1
128.3.0-1.el9_4.alma.1
thunderbird
AlmaLinux:8
From an advisory covering 11 CVEs
 before 128.3.0-1.el8_10.alma.1
128.3.0-1.el8_10.alma.1
firefox
AlmaLinux:8
From an advisory covering 12 CVEs
 before 128.3.0-1.el8_10.alma.1
128.3.0-1.el8_10.alma.1
thunderbird
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_4
0:128.3.0-1.el9_4
thunderbird-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_4
0:128.3.0-1.el9_4
thunderbird-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_4
0:128.3.0-1.el9_4
firefox
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el9_0
0:128.3.0-1.el9_0
firefox-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el9_0
0:128.3.0-1.el9_0
firefox-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el9_0
0:128.3.0-1.el9_0
firefox
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el9_2
0:128.3.0-1.el9_2
Show 77 moreShow less
Affected packages
PackageAffectedFixed
firefox-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el9_2
0:128.3.0-1.el9_2
firefox-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el9_2
0:128.3.0-1.el9_2
firefox-x11
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el9_2
0:128.3.0-1.el9_2
firefox
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_2
0:128.3.0-1.el8_2
firefox-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_2
0:128.3.0-1.el8_2
firefox-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_2
0:128.3.0-1.el8_2
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_10
0:128.3.0-1.el8_10
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_10
0:128.3.0-1.el8_10
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_10
0:128.3.0-1.el8_10
firefox
Red Hat:rhel_els:7
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el7_9
0:128.3.0-1.el7_9
firefox-debuginfo
Red Hat:rhel_els:7
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el7_9
0:128.3.0-1.el7_9
firefox
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
firefox
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
firefox
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_8
0:128.3.0-1.el8_8
firefox-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_8
0:128.3.0-1.el8_8
firefox-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 12 CVEs
 before 0:128.3.0-1.el8_8
0:128.3.0-1.el8_8
thunderbird
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_2
0:128.3.0-1.el9_2
thunderbird-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_2
0:128.3.0-1.el9_2
thunderbird-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_2
0:128.3.0-1.el9_2
thunderbird
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_4
0:128.3.0-1.el8_4
thunderbird
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_0
0:128.3.0-1.el9_0
thunderbird-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_0
0:128.3.0-1.el9_0
thunderbird-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el9_0
0:128.3.0-1.el9_0
thunderbird
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_2
0:128.3.0-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_2
0:128.3.0-1.el8_2
thunderbird-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_2
0:128.3.0-1.el8_2
thunderbird
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 12 CVEs
 before 0:128.3.1-1.el8_8
0:128.3.1-1.el8_8
thunderbird-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 12 CVEs
 before 0:128.3.1-1.el8_8
0:128.3.1-1.el8_8
thunderbird-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 12 CVEs
 before 0:128.3.1-1.el8_8
0:128.3.1-1.el8_8
thunderbird
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_6
0:128.3.0-1.el8_6
thunderbird
Rocky Linux:8
From an advisory covering 11 CVEs
 before 0:128.3.0-1.el8_10
0:128.3.0-1.el8_10
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
firefox
Ubuntu:20.04:LTS
 before 131.0+build1.1-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 45 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1
131.0+build1.1-0ubuntu0.20.04.1
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
mozjs102
Ubuntu:22.04:LTS
 All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 before 1:140.7.1+build1-0ubuntu0.22.04.1, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 33 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.1
1:140.7.1+build1-0ubuntu0.22.04.1
mozjs102
Ubuntu:24.04:LTS
 All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
 None known
mozjs115
Ubuntu:24.04:LTS
 All versions, plus listed versions
115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4
Show 4 moreShow less
115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1
 None known
firefox
Ubuntu:20.04:LTS
From an advisory covering 11 CVEs
 before 131.0+build1.1-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 45 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1
131.0+build1.1-0ubuntu0.20.04.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 13 CVEs
 before 131.0-1.1
131.0-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 228 CVEs
 before 153.0-1.1
153.0-1.1

History

History
RecordedChangedSources
referencesOSV
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-9403 is a high vulnerability (CVSS 7.3) in Mozilla Firefox, published October 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in firefox 131.0+build1.1-0ubuntu0.20.04.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 142 versions and 176 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open