Mozilla has issued an emergency security update to fix a critical use-after-free vulnerability in the Firefox browser.
The vulnerability is already being exploited in attacks and is tracked as CVE-2024-9680 . It was discovered by ESET researcher Damien Schaeffer and is a use-after-free bug in Animation timelines.
Through this vulnerability, attackers can add their own malicious data to the memory area to execute (malicious) code.
See also: Ivanti: Warns of three new CSA vulnerabilities
Animation timelines, part of Firefox's Web Animations API , are a mechanism that controls and synchronizes animations on web pages
According to Mozilla , an attacker was able to execute code in the content process using the vulnerability in question .
"We have had reports of exploitation of this vulnerability," the company added.
The vulnerability affects the latest version of Firefox (standard release) and Extended Support Releases (ESR).
Mozilla has fixed the vulnerability in the following versions of Firefox:
- Firefox 131.0.2
- Firefox ESR 115.16.1
- Firefox ESR 128.3.1
Upgrading to the latest versions is essential, given the severity of the vulnerability and active exploitation.
See also: Microsoft Patch Tuesday October 2024 fixes 118 vulnerabilities
To upgrade to the latest version, open Firefox and go to Settings -> Help -> About Firefox. The update should start automatically, but you will need to restart the program for the changes to take effect.
Updating your browser is a critical step in keeping your personal information and data while browsing the Internet. Hackers often exploit vulnerabilities in browsers to gain access to sensitive information, such as login credentials, financial information, or personal data.
See also: Android's October update fixes 26 vulnerabilities
Additionally, keeping your browser (e.g. Firefox) up to date helps protect against malware and viruses. Out-of-date programs are more vulnerable to malicious attacks, making it easier for hackers to infect your system with harmful software. By regularly updating your browser, you can prevent these types of threats and ensure the security of your device.
Source: www.bleepingcomputer.com
