CVE-2024-9936

6.5 mediumEPSS 0.3%

Medium (6.5) in mozilla firefox. EPSS 0.3% chance of exploitation in the next 30 days.

When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vulnerability affects Firefox < 131.0.3.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2024-10-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1920381
https://www.mozilla.org/security/advisories/mfsa2024-53/

Check your stack JSON