CVE-2024-7526

NVD Published Date: August 06, 2024 at 01:15 PM

NVD Last Modified: August 12, 2024 at 04:07 PM

Download Patch

Vulnerability ID

CVE-2024-7526

Severity

MEDIUM

Severity Score

6.5

Summary

ANGLE failed to initialize parameters which led to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1910306

https://www.mozilla.org/security/advisories/mfsa2024-33/

https://www.mozilla.org/security/advisories/mfsa2024-34/

https://www.mozilla.org/security/advisories/mfsa2024-35/

https://www.mozilla.org/security/advisories/mfsa2024-37/

https://www.mozilla.org/security/advisories/mfsa2024-38/

Mitigation and Patches

Exploits

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE ID

CWE-908

Recent Publish

CVE-2024-33988

CVE-2024-33994

CVE-2024-33983

CVE-2024-33992

CVE-2024-33990

CVE-2024-33991

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2024-7526

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-7526

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action