Severity
High
Analysis Summary
CVE-2024-8389 CVSS:8.8
Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by memory safety bugs within the browser engine. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service.
CVE-2024-8389 CVSS:8.8
Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by memory safety bugs within the browser engine. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service.
CVE-2024-8385 CVSS:8.8
Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by a WASM type confusion involving ArrayTypes. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service.
CVE-2024-8381 CVSS:8.8
Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by a type confusion when looking up a property name on an object being used as the with environment. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service.
Impact
- Denial of Service
- Code Execution
Indicators of Compromise
CVE
- CVE-2024-8389
- CVE-2024-8387
- CVE-2024-8385
- CVE-2024-8381
Affected Vendors
Affected Products
- Mozilla Firefox - 129.00
- Mozilla Firefox ESR - 128.1
- Mozilla Firefox ESR - 115.14
Remediation
Refer to Mozilla Foundation Security Advisory for patch, upgrade or suggested workaround information.