PT-2024-4247
CVE-2024-4367
·
تاريخ النشر
2023-10-30
·
تاريخ التحديث
2026-10-18
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 115.11.0esr-1~deb10u1 and earlier, Mozilla Thunderbird versions 115.10.0 and 128.3.0-alt1, Network Security Services (NSS).
Description: Multiple security issues have been found in Mozilla Firefox, Mozilla Thunderbird, and Network Security Services (NSS). These vulnerabilities could potentially result in arbitrary code execution, denial of service, or clickjacking. The vulnerabilities in Firefox have been addressed in version 115.11.0esr-1~deb10u1. The vulnerabilities in Thunderbird have been addressed in versions 115.10.0 and 128.3.0-alt1. The vulnerability in NSS has been addressed with fixes for a Minerva side-channel information leak.
Recommendations: Upgrade Mozilla Firefox to version 115.11.0esr-1~deb10u1 or later. Upgrade Mozilla Thunderbird to version 115.10.0 or 128.3.0-alt1. Update Network Security Services (NSS) to the latest version.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾