Mozilla Firefox/Thunderbird Security Advisory: 9 CVEs including RCE, XSS, Memory Corruption

From this webpage screenshot, the following key information about the vulnerabilities can be obtained: 1. Vulnerability IDs: - CVE-2024-11691 - CVE-2024-11692 - CVE-2024-11693 - CVE-2024-11694 - CVE-2024-11695 - CVE-2024-11696 - CVE-2024-11697 - CVE-2024-11698 - CVE-2024-11699 2. Vulnerability Descriptions: - CVE-2024-11691: Memory corruption in Apple GPU drivers - CVE-2024-11692: Select list elements could be shown over another site - CVE-2024-11693: Download Protections were bypassed by .library-ms files on Windows - CVE-2024-11694: CSP Bypass and XSS Exposure via Web Compatibility Shims - CVE-2024-11695: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters - CVE-2024-11696: Unhandled Exception in Add-on Signature Verification - CVE-2024-11697: Improper Keypress Handling in Executable File Confirmation Dialog - CVE-2024-11698: Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS - CVE-2024-11699: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 3. Impact Severity: - CVE-2024-11691: High - CVE-2024-11692: Moderate - CVE-2024-11693: Moderate - CVE-2024-11694: Moderate - CVE-2024-11695: Moderate - CVE-2024-11696: Moderate - CVE-2024-11697: Low - CVE-2024-11698: Low - CVE-2024-11699: High 4. Affected Products: - Thunderbird 128.5 5. Fixes Applied: - Thunderbird 128.5 6. Reference Links: - Bug 1924184 - Bug 1914707 - Bug 1909535 - Bug 1921458 - Bug 1924167 - Bug 1925496 - Bug 1929600 - Bug 1842187 - Bug 1916152 This information helps users understand the details of each vulnerability, including descriptions, severity levels, affected products, and remediation status.

Goal Reached Thanks to every supporter — we hit 100%!

Mozilla Firefox/Thunderbird Security Advisory: 9 CVEs including RCE, XSS, Memory Corruption

More from this source