Is CVE-2024-9680 actively exploited?

Yes. CVE-2024-9680 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2024-9680 be exploited remotely?

The attack vector of CVE-2024-9680 has not been classified yet.

What is the CVSS score of CVE-2024-9680?

CVE-2024-9680 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2024-9680

HIGHCISA KEVIN THE WILD

CVE-2024-9680

Published: October 15, 2024

EPSS:31.35%probability of exploitation in 30 daysPercentile:96.7th

Official Description

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.

NVD Source

CISA KEV Advisory

Mozilla Firefox Use-After-Free Vulnerability

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.

Added to KEV: 2024-10-15Federal patch deadline: 2024-11-05⚠ USED IN RANSOMWARE CAMPAIGNS

Required Action (CISA)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Risk Analysis

This use-after-free vulnerability in Mozilla Firefox and Firefox ESR's Animation timelines allows for code execution in the content process. Its presence in the KEV catalog and an EPSS score of 0.31347 indicate a high likelihood of exploitation, making it an urgent concern for Firefox users.

This vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog. Attackers are leveraging this flaw to execute code within the content process.

Recommended Action

Update Mozilla Firefox and Firefox ESR to the latest secure versions to address this use-after-free vulnerability. Users should ensure their browsers are always kept up-to-date to mitigate exploitation risks.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2024-9680 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2024-9680 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.