CVE-2024-8381

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 130 Firefox ESR versions prior to 128.2 Firefox ESR versions prior to 115.15 Thunderbird versions prior to 128.2 Thunderbird versions prior to 115.15

Description A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the with environment. This issue may allow a remote attacker to execute arbitrary code.

Recommendations Firefox versions prior to 130: Update to version 130 or later to resolve the issue. Firefox ESR versions prior to 128.2: Update to version 128.2 or later to resolve the issue. Firefox ESR versions prior to 115.15: Update to version 115.15 or later to resolve the issue. Thunderbird versions prior to 128.2: Update to version 128.2 or later to resolve the issue. Thunderbird versions prior to 115.15: Update to version 115.15 or later to resolve the issue.