CVE-2024-7522

Summary

CVE-2024-7522 is a newly disclosed vulnerability that affects multiple versions of Firefox and Thunderbird. The root cause is an editor code flaw that fails to validate an attribute value, leading to an out-of-bounds read vulnerability. If successfully exploited, this issue could allow an attacker to read sensitive data outside of the intended boundaries. Firefox versions below 129, Firefox ESR below 115.14, Firefox ESR below 128.1, Thunderbird below 128.1, and Thunderbird below 115.14 are susceptible to this vulnerability, making it essential for users to update their software as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.