CVE-2024-6604
Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
CVSS score
7.5
EPSS probability
%0.5
Risk score
0.0
Published
2 y ago
Vulnerability Timeline (Change History)
CVE-2024-6604 historical changes made to the vulnerability by NVD, CISA and MITRE:
| Date | Actor / Source | Action / Description | Type | Previous value | New value |
|---|---|---|---|---|---|
| 11.08.2026 | nvd@nist.gov | Initial Analysis & CVSS Vector Assignment | CVSS V3.1 | — | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 09.07.2024 | CISA Coordinator | SSVC Risk Re-assessment | SSVC / KEV | exploitation: none | exploitation: none |
| 09.07.2024 | MITRE / NVD | New CVE Record Received & Ingested | CVE Created | — | CVE-2024-6604 |
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-6604"