CVE-2024-0743highCWE-252

CVE-2024-0743: falha de alta gravidade em Mozilla Firefox

Publicada em 23 jan 2024 · Atualizada em 03 nov 2025

Seguir esta CVE + Monitorar Firefox + Monitorar Thunderbird

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.3%

An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

CVEs relacionadas — Mozilla Firefox

No mesmo produto, das mais perigosas para as menos.

CVE-2016-9079HIGHCVE-2016-9079EPSS 87.4%KEV CVE-2019-11708CRITICALCVE-2019-11708EPSS 55.9%KEV CVE-2019-17026HIGHCVE-2019-17026EPSS 46.3%KEV CVE-2019-11707HIGHCVE-2019-11707EPSS 38.0%KEV CVE-2024-9680CRITICALCVE-2024-9680EPSS 23.2%KEV CVE-2022-26485HIGHCVE-2022-26485EPSS 14.3%KEV

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1867408 https://lists.debian.org/debian-lts-announce/2024/03/msg00010.html https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html https://lists.debian.org/debian-lts-announce/2024/10/msg00028.html https://www.mozilla.org/security/advisories/mfsa2024-01/https://www.mozilla.org/security/advisories/mfsa2024-13/https://www.mozilla.org/security/advisories/mfsa2024-14/