Read the docs
TI-2024-04069 Aliases CVE-2024-4367GHSA-wgrm-67xf-hhpq

Improper check for unusual conditions in Mozilla Firefox

Priority HIGH 78CWE-754Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 26 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat.

Summary

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.7066 99th percentileScored 2026-11-07
Fix Partial Firefox (Mozilla): 126Firefox ESR (Mozilla): 115.11+2 more productsRed Hat: 27 advisoriesRed Hat: 26 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MozillaFirefoxbefore 126126Patch availableCNA
MozillaFirefox ESRbefore 115.11115.11Patch availableCNA
MozillaThunderbirdbefore 115.11115.11Patch availableCNA
—pdfjs-dist (npm)before 4.2.674.2.67Patch availableGHSA-wgrm-67xf-hhpq
  • Firefox VendorMozilla Affected before 126 Fixed in 126 Patch available CNA
  • Firefox ESR VendorMozilla Affected before 115.11 Fixed in 115.11 Patch available CNA
  • Thunderbird VendorMozilla Affected before 115.11 Fixed in 115.11 Patch available CNA
  • pdfjs-dist (npm) Vendor— Affected before 4.2.67 Fixed in 4.2.67 Patch available GHSA-wgrm-67xf-hhpq

CPE configurations NVD · 48

CPEVersionsRoleVendor
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*before 115.11.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*before 126.0VulnerableMozilla
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*before 115.11.0VulnerableMozilla
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:*:*:*:*:*:*:*:*before 7.10.6VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:-:*:*:*:*:*:*7.10.6VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision10:*:*:*:*:*:*7.10.6 revision10VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision11:*:*:*:*:*:*7.10.6 revision11VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision12:*:*:*:*:*:*7.10.6 revision12VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision13:*:*:*:*:*:*7.10.6 revision13VulnerableOpen-Xchange GmbH
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* Versions before 115.11.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* Versions before 126.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* Versions before 115.11.0 Vulnerable ·Mozilla
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:*:*:*:*:*:*:*:* Versions before 7.10.6 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:-:*:*:*:*:*:* Versions 7.10.6 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision10:*:*:*:*:*:* Versions 7.10.6 revision10 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision11:*:*:*:*:*:* Versions 7.10.6 revision11 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision12:*:*:*:*:*:* Versions 7.10.6 revision12 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision13:*:*:*:*:*:* Versions 7.10.6 revision13 Vulnerable ·Open-Xchange GmbH
Show 38 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision14:*:*:*:*:*:*7.10.6 revision14VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision15:*:*:*:*:*:*7.10.6 revision15VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision16:*:*:*:*:*:*7.10.6 revision16VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision17:*:*:*:*:*:*7.10.6 revision17VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision18:*:*:*:*:*:*7.10.6 revision18VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision19:*:*:*:*:*:*7.10.6 revision19VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision20:*:*:*:*:*:*7.10.6 revision20VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision21:*:*:*:*:*:*7.10.6 revision21VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision22:*:*:*:*:*:*7.10.6 revision22VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision23:*:*:*:*:*:*7.10.6 revision23VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision24:*:*:*:*:*:*7.10.6 revision24VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision25:*:*:*:*:*:*7.10.6 revision25VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision26:*:*:*:*:*:*7.10.6 revision26VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision27:*:*:*:*:*:*7.10.6 revision27VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision28:*:*:*:*:*:*7.10.6 revision28VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision29:*:*:*:*:*:*7.10.6 revision29VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision3:*:*:*:*:*:*7.10.6 revision3VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision30:*:*:*:*:*:*7.10.6 revision30VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision31:*:*:*:*:*:*7.10.6 revision31VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision32:*:*:*:*:*:*7.10.6 revision32VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision33:*:*:*:*:*:*7.10.6 revision33VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision34:*:*:*:*:*:*7.10.6 revision34VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision35:*:*:*:*:*:*7.10.6 revision35VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision36:*:*:*:*:*:*7.10.6 revision36VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision37:*:*:*:*:*:*7.10.6 revision37VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision38:*:*:*:*:*:*7.10.6 revision38VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision39:*:*:*:*:*:*7.10.6 revision39VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision4:*:*:*:*:*:*7.10.6 revision4VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision40:*:*:*:*:*:*7.10.6 revision40VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision41:*:*:*:*:*:*7.10.6 revision41VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision42:*:*:*:*:*:*7.10.6 revision42VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision43:*:*:*:*:*:*7.10.6 revision43VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision44:*:*:*:*:*:*7.10.6 revision44VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision5:*:*:*:*:*:*7.10.6 revision5VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision6:*:*:*:*:*:*7.10.6 revision6VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision7:*:*:*:*:*:*7.10.6 revision7VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision8:*:*:*:*:*:*7.10.6 revision8VulnerableOpen-Xchange GmbH
cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision9:*:*:*:*:*:*7.10.6 revision9VulnerableOpen-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision14:*:*:*:*:*:* Versions 7.10.6 revision14 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision15:*:*:*:*:*:* Versions 7.10.6 revision15 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision16:*:*:*:*:*:* Versions 7.10.6 revision16 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision17:*:*:*:*:*:* Versions 7.10.6 revision17 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision18:*:*:*:*:*:* Versions 7.10.6 revision18 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision19:*:*:*:*:*:* Versions 7.10.6 revision19 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision20:*:*:*:*:*:* Versions 7.10.6 revision20 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision21:*:*:*:*:*:* Versions 7.10.6 revision21 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision22:*:*:*:*:*:* Versions 7.10.6 revision22 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision23:*:*:*:*:*:* Versions 7.10.6 revision23 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision24:*:*:*:*:*:* Versions 7.10.6 revision24 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision25:*:*:*:*:*:* Versions 7.10.6 revision25 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision26:*:*:*:*:*:* Versions 7.10.6 revision26 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision27:*:*:*:*:*:* Versions 7.10.6 revision27 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision28:*:*:*:*:*:* Versions 7.10.6 revision28 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision29:*:*:*:*:*:* Versions 7.10.6 revision29 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision3:*:*:*:*:*:* Versions 7.10.6 revision3 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision30:*:*:*:*:*:* Versions 7.10.6 revision30 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision31:*:*:*:*:*:* Versions 7.10.6 revision31 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision32:*:*:*:*:*:* Versions 7.10.6 revision32 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision33:*:*:*:*:*:* Versions 7.10.6 revision33 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision34:*:*:*:*:*:* Versions 7.10.6 revision34 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision35:*:*:*:*:*:* Versions 7.10.6 revision35 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision36:*:*:*:*:*:* Versions 7.10.6 revision36 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision37:*:*:*:*:*:* Versions 7.10.6 revision37 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision38:*:*:*:*:*:* Versions 7.10.6 revision38 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision39:*:*:*:*:*:* Versions 7.10.6 revision39 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision4:*:*:*:*:*:* Versions 7.10.6 revision4 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision40:*:*:*:*:*:* Versions 7.10.6 revision40 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision41:*:*:*:*:*:* Versions 7.10.6 revision41 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision42:*:*:*:*:*:* Versions 7.10.6 revision42 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision43:*:*:*:*:*:* Versions 7.10.6 revision43 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision44:*:*:*:*:*:* Versions 7.10.6 revision44 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision5:*:*:*:*:*:* Versions 7.10.6 revision5 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision6:*:*:*:*:*:* Versions 7.10.6 revision6 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision7:*:*:*:*:*:* Versions 7.10.6 revision7 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision8:*:*:*:*:*:* Versions 7.10.6 revision8 Vulnerable ·Open-Xchange GmbH
  • cpe:2.3:a:open-xchange:open-xchange_appsuite_frontend:7.10.6:revision9:*:*:*:*:*:* Versions 7.10.6 revision9 Vulnerable ·Open-Xchange GmbH

Remediation

  • Fix · CNA Firefox (Mozilla) Fixed in 126
  • Fix · CNA Firefox ESR (Mozilla) Fixed in 115.11
  • Fix · CNA Thunderbird (Mozilla) Fixed in 115.11
  • Fix · GHSA-wgrm-67xf-hhpq pdfjs-dist (npm) Fixed in 4.2.67 Advisory →

Red Hat 27 advisories

  • RHSA-2026:59326 Released 2026-08-25 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) webkit2gtk3-2.52.5-1.el8_8, webkit2gtk3-devel-2.52.5-1.el8_8, webkit2gtk3-jsc-2.52.5-1.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) webkit2gtk3-2.52.5-1.el8_8, webkit2gtk3-devel-2.52.5-1.el8_8, webkit2gtk3-jsc-2.52.5-1.el8_8 +1
  • RHSA-2026:59325 Released 2026-08-25 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) webkit2gtk3-2.52.5-1.el8_6, webkit2gtk3-devel-2.52.5-1.el8_6, webkit2gtk3-jsc-2.52.5-1.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) webkit2gtk3-2.52.5-1.el8_6, webkit2gtk3-devel-2.52.5-1.el8_6, webkit2gtk3-jsc-2.52.5-1.el8_6 +1
  • RHSA-2026:58564 Released 2026-08-24 · Red Hat rating Important
    webkitgtk4 security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) webkitgtk4-2.52.5-1.el7_9, webkitgtk4-devel-2.52.5-1.el7_9, webkitgtk4-jsc-2.52.5-1.el7_9 +1
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) webkitgtk4-devel-2.52.5-1.el7_9, webkitgtk4-doc-2.52.5-1.el7_9, webkitgtk4-jsc-devel-2.52.5-1.el7_9
Show 24 more Red Hat advisories
  • RHSA-2026:58550 Released 2026-08-24 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) webkit2gtk3-2.52.5-1.el9_2, webkit2gtk3-devel-2.52.5-1.el9_2, webkit2gtk3-jsc-2.52.5-1.el9_2 +1
  • RHSA-2026:57348 Released 2026-08-20 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) webkit2gtk3-2.52.5-1.el8_4, webkit2gtk3-devel-2.52.5-1.el8_4, webkit2gtk3-jsc-2.52.5-1.el8_4 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) webkit2gtk3-2.52.5-1.el8_4, webkit2gtk3-devel-2.52.5-1.el8_4, webkit2gtk3-jsc-2.52.5-1.el8_4 +1
  • RHSA-2026:54634 Released 2026-08-13 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) webkit2gtk3-2.52.5-1.el9_4, webkit2gtk3-devel-2.52.5-1.el9_4, webkit2gtk3-jsc-2.52.5-1.el9_4 +1
  • RHSA-2026:54572 Released 2026-08-13 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) webkit2gtk3-2.52.5-1.el9_6, webkit2gtk3-devel-2.52.5-1.el9_6, webkit2gtk3-jsc-2.52.5-1.el9_6 +1
  • RHSA-2026:42062 Released 2026-07-20 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3-2.52.5-1.el9_8, webkit2gtk3-devel-2.52.5-1.el9_8, webkit2gtk3-jsc-2.52.5-1.el9_8 +1
  • RHSA-2026:42088 Released 2026-07-20 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream (v. 8) webkit2gtk3-2.52.5-1.el8_10, webkit2gtk3-devel-2.52.5-1.el8_10, webkit2gtk3-jsc-2.52.5-1.el8_10 +1
  • RHSA-2024:3784 Released 2024-06-10 · Red Hat rating Moderate
    thunderbird security update
    • Red Hat Enterprise Linux AppStream (v. 8) thunderbird-115.11.0-1.el8_10
  • RHSA-2024:3783 Released 2024-06-10 · Red Hat rating Moderate
    firefox security update
    • Red Hat Enterprise Linux AppStream (v. 8) firefox-115.11.0-1.el8_10
  • RHSA-2024:3338 Released 2024-05-23 · Red Hat rating Moderate
    thunderbird security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) thunderbird-115.11.0-1.el8_2
  • RHSA-2024:2913 Released 2024-05-20 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux Client (v. 7) thunderbird-115.11.0-1.el7_9
    • Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-115.11.0-1.el7_9
    • Red Hat Enterprise Linux Workstation (v. 7) thunderbird-115.11.0-1.el7_9
  • RHSA-2024:2912 Released 2024-05-20 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) thunderbird-115.11.0-1.el8_6
  • RHSA-2024:2911 Released 2024-05-20 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) thunderbird-115.11.0-1.el8_4
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) thunderbird-115.11.0-1.el8_4
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) thunderbird-115.11.0-1.el8_4
  • RHSA-2024:2903 Released 2024-05-20 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) thunderbird-115.11.0-1.el9_2
  • RHSA-2024:2906 Released 2024-05-20 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) firefox-115.11.0-1.el9_2, firefox-x11-115.11.0-1.el9_2
  • RHSA-2024:2905 Released 2024-05-20 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) thunderbird-115.11.0-1.el8_8
  • RHSA-2024:2904 Released 2024-05-20 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) thunderbird-115.11.0-1.el9_0
  • RHSA-2024:2881 Released 2024-05-16 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux Client (v. 7) firefox-115.11.0-1.el7_9
    • Red Hat Enterprise Linux Client Optional (v. 7) firefox-115.11.0-1.el7_9
    • Red Hat Enterprise Linux Server (v. 7) firefox-115.11.0-1.el7_9
    • Red Hat Enterprise Linux Server Optional (v. 7) firefox-115.11.0-1.el7_9
    • Red Hat Enterprise Linux Workstation (v. 7) firefox-115.11.0-1.el7_9
    • Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-115.11.0-1.el7_9
  • RHSA-2024:2887 Released 2024-05-16 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) firefox-115.11.0-1.el8_6
  • RHSA-2024:2883 Released 2024-05-16 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream (v. 9) firefox-115.11.0-1.el9_4, firefox-x11-115.11.0-1.el9_4
  • RHSA-2024:2885 Released 2024-05-16 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) firefox-115.11.0-1.el8_8
  • RHSA-2024:2886 Released 2024-05-16 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) firefox-115.11.0-1.el8_4
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) firefox-115.11.0-1.el8_4
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) firefox-115.11.0-1.el8_4
  • RHSA-2024:2882 Released 2024-05-16 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) firefox-115.11.0-1.el8_2
  • RHSA-2024:2884 Released 2024-05-16 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) firefox-115.11.0-1.el9_0
  • RHSA-2024:2888 Released 2024-05-16 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream (v. 9) thunderbird-115.11.0-1.el9_4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Mozilla Firefox 126

    16 records Highest priority Priority HIGH 1 HIGH, 7 MEDIUM, 8 LOW

    Other records, highest priority first

    • TI-2024-04437 Use after free in Mozilla FirefoxPriority MEDIUM 50
    • TI-2024-04444 Use after free in Mozilla FirefoxPriority MEDIUM 44
    • TI-2024-04451 Memory safety bugs present in Firefox 125.Priority MEDIUM 43
    Show all 16 records →
  • Release ·

    Mozilla Firefox ESR, Thunderbird 115.11

    6 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2024-04450 Use after free in Mozilla FirefoxPriority MEDIUM 41
    • TI-2024-04443 Use after free in Mozilla FirefoxPriority MEDIUM 41
    • TI-2024-04441 A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to…Priority LOW 28
    Show all 6 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:3783, RHSA-2024:3784, RHSA-2026:42088
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:2883, RHSA-2024:2888, RHSA-2026:42062
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2024:2882, RHSA-2024:3338
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2024:2886, RHSA-2024:2911, RHSA-2026:57348
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:59325
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2024:2886, RHSA-2024:2911
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:59326
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:58550
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:54634
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:2887, RHSA-2024:2912
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:2885, RHSA-2024:2905
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2024:2884, RHSA-2024:2904
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:2903, RHSA-2024:2906
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:54572
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:57348
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:59325
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2024:2886, RHSA-2024:2911
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:59326
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2024:2881, RHSA-2024:2913
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2024:2881
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:58564
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:2881
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:58564
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2024:2881, RHSA-2024:2913
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:2881, RHSA-2024:2913
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2024:2881
Not affected: 1 product
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-4367
  2. 2026-10-03 Alias added: GHSA-wgrm-67xf-hhpq

References

Advisory 4

Other 16

  • TI-2024-08981 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-09832 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.6
  • TI-2019-08769 Improper input validation in Mozilla Firefox ESR KEVCVSS 3.1CRITICAL 10.0
  • TI-2010-03577 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-04799 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
  • TI-2023-04477 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
See all 3444 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences