{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T09:56:13.203","vulnerabilities":[{"cve":{"id":"CVE-2024-9396","sourceIdentifier":"security@mozilla.org","published":"2024-10-01T16:15:10.790","lastModified":"2026-06-17T08:24:29.273","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131."},{"lang":"es","value":"Actualmente se desconoce si este problema se puede explotar, pero puede darse el caso de que la clonación estructurada de determinados objetos pueda provocar daños en la memoria. Esta vulnerabilidad afecta a Firefox &lt; 131, Firefox ESR &lt; 128.3, Thunderbird &lt; 128.3 y Thunderbird &lt; 131."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"Mozilla","product":"Firefox","versions":[{"version":"unspecified","lessThan":"131","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Firefox ESR","versions":[{"version":"unspecified","lessThan":"128.3","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Thunderbird","versions":[{"version":"unspecified","lessThan":"128.3","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Thunderbird","versions":[{"version":"unspecified","lessThan":"131","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"mozilla","product":"firefox","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"131","versionType":"custom","status":"affected"}]},{"vendor":"mozilla","product":"firefox_esr","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"128.3","versionType":"custom","status":"affected"}]},{"vendor":"mozilla","product":"thunderbird","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"128.3","versionType":"custom","status":"affected"},{"version":"0","lessThan":"131","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-01T19:12:49.374493Z","id":"CVE-2024-9396","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*","versionEndExcluding":"128.3.0","matchCriteriaId":"BA7BC46B-62B5-40E4-A4D9-E05B01AA3030"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"131.0","matchCriteriaId":"DA47FFCA-3451-462C-8FFB-47143C65E65A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"128.3.0","matchCriteriaId":"162E998D-FC05-4428-A848-3073BC879D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"129.0","versionEndExcluding":"131.0","matchCriteriaId":"9556B29A-F934-4F99-9C7F-6506CA829DB3"}]}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1912471","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-46/","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-47/","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-49/","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-50/","source":"security@mozilla.org","tags":["Vendor Advisory"]}]}}]}