CRITICAL 9.8 Microsoft

CVE-2024-4778

Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126.

Microsoft Security Update 2024-May: Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126.

Affected Products

azl3 mozjs 102.15.1-1 on Azure Linux 3.0

References

Published: 2024-05-14 · Source: Microsoft · Feed updated: 2026-08-04

This critical severity vulnerability with a CVSS score of 9.8 was published on 2024-05-14 via Microsoft. Affected: azl3 mozjs 102.15.1-1 on Azure Linux 3.0.

Risk Timeline

CVE Disclosed2024-05-14 · 811 days ago

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4778

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2024-4778

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-40175	Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain	CRITICAL	10.0
CVE-2026-42960	Possible cache poisoning via promiscuous records for the authority section	CRITICAL	10.0
CVE-2026-46595	Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x	CRITICAL	10.0
CVE-2026-39821	Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/ne	CRITICAL	10.0
CVE-2024-24576 PoC	Rusts's `std::process::Command` did not properly escape arguments of batch files	CRITICAL	10.0
CVE-2026-7374	Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via sy	CRITICAL	9.9

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.