CVE-2024-8381

Summary

A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the with environment. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 130affected
MozillaFirefox ESRunspecified < 128.2affected
MozillaFirefox ESRunspecified < 115.15affected
MozillaThunderbirdunspecified < 128.2affected
MozillaThunderbirdunspecified < 115.15affected

Weaknesses

  • Type confusion when looking up a property name in a "with" block

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

CVE Program Container

Additional References

References