October 15, 2024 · Applied Cybernetics Group
CVE-2024-9680 — Mozilla Firefox
known ransomware use
Mozilla Firefox Use-After-Free Vulnerability
- Added to KEV
2024-10-15- Federal due date
2024-11-05- Vendor
- Mozilla
- Product
- Firefox
- EPSS
- 98.1th percentile (score 0.326, as of
2026-07-13) - NVD CVSS v3.1
- —
- Ransomware use
- Known
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2024-9680
CISA short description
Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.