Vulnerabilities

TI-2024-07774 CVE-2024-8384 · GHSA-6q4m-8cmc-2222

Use after free in Mozilla Firefox

MEDIUM 50

The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00719 Published 2024-09-03 Partial fix · 130, 128.2 +1 CWE-416

TI-2024-07772 CVE-2024-8382 · GHSA-ph32-hgpc-r5j4

MEDIUM 41

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00595 Published 2024-09-03 Partial fix · 130, 128.2 +1 CWE-273

TI-2024-07771 CVE-2024-8381 · GHSA-x565-97fv-jfr5

MEDIUM 56

A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04395 Published 2024-09-03 Partial fix · 130, 128.2 +1 CWE-843