[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLPShnlHJRCXVyifMsqWXtcAh3nyYZpFBIi6aoYe_xF0":3,"g5a-risk:CVE-2024-9680":183},{"success":4,"data":5,"meta":180},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":27,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":56,"references":57,"referencesCount":94,"weaknesses":95,"weaknessesCount":104,"isActivelyExploited":4,"cisaInfo":105,"otxData":27,"relatedBlogPosts":106,"seoMetadata":107,"configurations":132,"relatedVendorCves":164,"notableEvents":165},"CVE-2024-9680","What is CVE-2024-9680?","An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox \u003C 131.0.2, Firefox ESR \u003C 128.3.1, Firefox ESR \u003C 115.16.1, Thunderbird \u003C 131.0.1, Thunderbird \u003C 128.3.1, and Thunderbird \u003C 115.16.0.","An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vuln...","2024-10-09T13:15:12.09","2025-11-04T14:35:50.977",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],0.23184,[36,36,36,36,36,36,36],"Critical",[40,45,48,51],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"mozilla","firefox","*","cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",{"vendor":41,"product":46,"version":43,"criteria":47,"vulnerable":4},"thunderbird","cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",{"vendor":41,"product":46,"version":49,"criteria":50,"vulnerable":4},"131.0","cpe:2.3:a:mozilla:thunderbird:131.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"debian","debian_linux","11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",4,[58,64,71,74,77,81,86,89],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=1923344","Mozilla",[62,63],"Issue Tracking","Permissions Required",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fen-US\u002Fvulnerability\u002FCVE-2024-49039","Microsoft",[68,69,70],"Not Applicable","Patch","Vendor Advisory",{"url":72,"source":60,"tags":73},"https:\u002F\u002Fwww.mozilla.org\u002Fsecurity\u002Fadvisories\u002Fmfsa2024-51\u002F",[70],{"url":75,"source":60,"tags":76},"https:\u002F\u002Fwww.mozilla.org\u002Fsecurity\u002Fadvisories\u002Fmfsa2024-52\u002F",[70],{"url":78,"source":79,"tags":80},"https:\u002F\u002Fbugs.freebsd.org\u002Fbugzilla\u002Fshow_bug.cgi?id=281992","Freebsd",[62],{"url":82,"source":83,"tags":84},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F10\u002Fmsg00005.html","Debian",[85],"Mailing List",{"url":87,"source":83,"tags":88},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F10\u002Fmsg00006.html",[85],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9680","CISA",[93],"US Government Resource",8,[96],{"id":97,"name":98,"description":99,"extendedDescription":100,"status":101,"abstraction":102,"structure":103},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","","Stable","Variant","Simple",1,{"shortDescription":100,"requiredAction":100,"vulnerabilityName":100,"dateAdded":27},[],{"title":108,"metaDescription":109,"keywords":110,"canonicalUrl":111,"structuredData":112},"What is CVE-2024-9680? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-9680, a critical severity cyber security vulnerability from 2024. An attacker was able to achieve code execution in the co...","CVE-2024-9680, CVE-2024-9680 vulnerability, CVE-2024-9680 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, mozilla security, debian security, firefox vulnerability, thunderbird vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2024-9680",{"@context":113,"@type":114,"headline":108,"description":109,"datePublished":10,"dateModified":11,"author":115,"publisher":119,"about":123,"mainEntityOfPage":127,"articleSection":130,"keywords":131},"https:\u002F\u002Fschema.org","TechArticle",{"@type":116,"name":117,"url":118},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":116,"name":117,"url":118,"logo":120},{"@type":121,"url":122},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":124,"name":6,"description":125,"additionalType":126},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":128,"@id":129},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-9680","Cybersecurity","CVE-2024-9680, CVE-2024-9680 vulnerability, CVE-2024-9680 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[133,158],{"Operator":27,"Negate":27,"Nodes":134},[135],{"Operator":136,"Negate":137,"CPEMatch":138},"OR",false,[139,142,146,150,153,156],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":141,"VersionEndIncluding":27},"45244B45-832B-4C4A-8004-8D13C331E52B","115.16.1",{"Vulnerable":4,"Criteria":143,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":145,"VersionEndIncluding":27},"cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*","07E39FE8-1685-46D2-9E3E-2613F3852132","131.0.2",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":148,"VersionEndExcluding":149,"VersionEndIncluding":27},"C4AEB9BD-EB47-4F96-BC72-949023ACE8ED","128.1.0","128.3.1",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":152,"VersionEndIncluding":27},"DB9A49A0-8233-46B2-894A-FAD4DC6ED563","115.16.0",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":155,"VersionEndExcluding":149,"VersionEndIncluding":27},"F48D7DE7-477D-4026-B6BD-BFE2BC5382F3","128.0.1",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FD5E6249-26BF-4E13-87D8-B15EF63A859F",{"Operator":27,"Negate":27,"Nodes":159},[160],{"Operator":136,"Negate":137,"CPEMatch":161},[162],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FA6FEEC2-9F11-4643-8827-749718254FED",[],[166,173],{"id":167,"eventType":168,"eventTime":169,"details":170,"label":171,"color":172},"edba37c1-f7af-49cd-91c6-155f70d3121e","LOW_EPSS_DELTA","2025-06-11T10:09:47.01242+00:00","Daily EPSS score decreased by 0.228 on 2024-10-11","EPSS Score Decreased","green",{"id":174,"eventType":175,"eventTime":176,"details":177,"label":178,"color":179},"7d1cd4e7-2bdd-4b48-b589-546cb5984981","HIGH_EPSS_DELTA","2025-11-19T04:04:11.398305+00:00","Daily EPSS score increased by 0.133 on 2024-10-11","EPSS Score Increased","red",{"lastModified":11,"cacheTime":181,"version":182},1792358944519,"2.0",{"score":184,"band":38,"action":185,"scoredAt":186},87,"Emergency patch","2026-10-16T07:04:04.503209+00:00"]