{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T23:09:20.367","vulnerabilities":[{"cve":{"id":"CVE-2024-3864","sourceIdentifier":"security@mozilla.org","published":"2024-04-16T16:15:08.913","lastModified":"2026-06-17T07:45:19.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10."},{"lang":"es","value":"Error de seguridad de la memoria presente en Firefox 124, Firefox ESR 115.9 y Thunderbird 115.9. Este error mostró evidencia de corrupción de memoria y suponemos que con suficiente esfuerzo esto podría haberse aprovechado para ejecutar código arbitrario. Esta vulnerabilidad afecta a Firefox &lt; 125 y Firefox ESR &lt; 115.10."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"Mozilla","product":"Firefox","versions":[{"version":"unspecified","lessThan":"125","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Firefox ESR","versions":[{"version":"unspecified","lessThan":"115.10","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Thunderbird","versions":[{"version":"unspecified","lessThan":"115.10","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"mozilla","product":"thunderbird","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"115.9","versionType":"custom","status":"affected"}]},{"vendor":"mozilla","product":"firefox_esr","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"115.9","versionType":"custom","status":"affected"}]},{"vendor":"mozilla","product":"firefox","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"124","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-12T16:57:55.924195Z","id":"CVE-2024-3864","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*","versionEndExcluding":"115.10.0","matchCriteriaId":"3F21776B-01C2-4251-843F-0CC6AE208BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*","versionEndExcluding":"125.0","matchCriteriaId":"4A9A567D-16CB-472A-A95B-31BCFB1DFC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"115.10.0","matchCriteriaId":"FAA294CB-6A6F-4120-B583-5776229FFB76"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1888333","source":"security@mozilla.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html","source":"security@mozilla.org","tags":["Mailing List"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html","source":"security@mozilla.org","tags":["Mailing List"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-18/","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-19/","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-20/","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1888333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-18/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-19/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-20/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}