Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-5740-1 | firefox-esr security update |
Debian DSA |
DSA-5744-1 | thunderbird security update |
Ubuntu USN |
USN-6966-1 | Firefox vulnerabilities |
Ubuntu USN |
USN-6995-1 | Thunderbird vulnerabilities |
Tue, 17 Sep 2024 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | ANGLE failed to initialize parameters which led to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. | ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. |
Fri, 16 Aug 2024 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat
Redhat enterprise Linux Redhat rhel Aus Redhat rhel E4s Redhat rhel Els Redhat rhel Eus Redhat rhel Tus |
|
| CPEs | cpe:/a:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:9 cpe:/a:redhat:rhel_aus:8.2 cpe:/a:redhat:rhel_aus:8.4 cpe:/a:redhat:rhel_aus:8.6 cpe:/a:redhat:rhel_e4s:8.4 cpe:/a:redhat:rhel_e4s:8.6 cpe:/a:redhat:rhel_e4s:9.0 cpe:/a:redhat:rhel_eus:8.8 cpe:/a:redhat:rhel_eus:9.2 cpe:/a:redhat:rhel_tus:8.4 cpe:/a:redhat:rhel_tus:8.6 cpe:/o:redhat:rhel_els:7 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux Redhat rhel Aus Redhat rhel E4s Redhat rhel Els Redhat rhel Eus Redhat rhel Tus |
Mon, 12 Aug 2024 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox_esr:128.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:128.0.1:*:*:*:*:*:*:* |
Thu, 08 Aug 2024 23:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 07 Aug 2024 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mozilla
Mozilla firefox Mozilla firefox Esr Mozilla thunderbird |
|
| CPEs | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Mozilla
Mozilla firefox Mozilla firefox Esr Mozilla thunderbird |
|
| Metrics |
cvssV3_1
|
ssvc
|
Wed, 07 Aug 2024 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | mozilla: Uninitialized memory used by WebGL | |
| Weaknesses | CWE-908 | |
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Tue, 06 Aug 2024 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1. | ANGLE failed to initialize parameters which led to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. |
| References |
|
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-09-17T18:14:47.411Z
Reserved: 2024-08-05T23:30:13.451Z
Link: CVE-2024-7526
Updated: 2024-08-07T20:53:44.659Z
Status : Modified
Published: 2024-08-06T13:15:57.483
Modified: 2024-09-17T19:15:28.857
Link: CVE-2024-7526
OpenCVE Enrichment
No data.
Debian DSA
Ubuntu USN