CVE-2024-3852

—

CVSS 3.1

7.5 high

EPSS

<1%p48

Published

Apr 16, 2024 (Apr 16, 2024)

Modified

Jun 17, 2026

Description

GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

Vendors: mozilla
Products: firefox, thunderbird
Weakness: CWE-386
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.