CVE-2024-7527: Use After Free
Last updated 9 September 2024
Other sources
Unexpected marking work at the start of sweeping could have led to a use-after-free.
— Mozilla
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-7527?
CVE-2024-7527 is classified as a critical vulnerability due to the potential for exploit causing a use-after-free condition.
How do I fix CVE-2024-7527?
To remediate CVE-2024-7527, update to Firefox version 129 or later, Firefox ESR version 115.14 or later, or Thunderbird version 128.1 or later.
Which versions are affected by CVE-2024-7527?
CVE-2024-7527 affects Firefox versions lower than 129, Firefox ESR versions lower than 115.14 and 128.1, and Thunderbird versions lower than 128.1.
What type of vulnerability is CVE-2024-7527?
CVE-2024-7527 is a use-after-free vulnerability that can be triggered during unexpected marking work at the start of the sweeping process.
Who is the vendor for CVE-2024-7527?
The vendor for CVE-2024-7527 is Mozilla, which develops Firefox, Firefox ESR, and Thunderbird software.