CRITICAL 9.6 Microsoft

CVE-2024-7519

Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Microsoft Security Update 2024-Aug: Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Affected Products

azl3 mozjs 102.15.1-1 on Azure Linux 3.0

References

Published: 2024-08-13 · Source: Microsoft · Feed updated: 2026-10-28

This critical severity vulnerability with a CVSS score of 9.6 was published on 2024-08-13 via Microsoft. Affected: azl3 mozjs 102.15.1-1 on Azure Linux 3.0.

Risk Timeline

CVE Disclosed2024-08-13 · 805 days ago

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7519

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2024-7519

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-94603	Podman: The `podman run` command can be instructed to disable almost all sandbox	CRITICAL	10.0
CVE-2025-62168 PoC	Squid vulnerable to information disclosure via authentication credential leakage	CRITICAL	10.0
CVE-2026-115384	Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow	CRITICAL	9.9
CVE-2026-77524	KEDA: Privilege escalation from namespace admin to cluster admin via KEDA Trigge	CRITICAL	9.9
CVE-2026-44210	Kata Containers have VM Escape via virtiofsd Argument Injection through Default-	CRITICAL	9.9
CVE-2026-56154	Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}	CRITICAL	9.8

vulnfeed aggregates 14962 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.