CVE-2024-9936: Race Condition

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1920381
• https://www.mozilla.org/en-US/security/advisories/mfsa2024-53/
• https://www.mozilla.org/security/advisories/mfsa2024-53/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9936
• https://nvd.nist.gov/vuln/detail/CVE-2024-9936
• https://launchpad.net/bugs/cve/CVE-2024-9936
• https://security-tracker.debian.org/tracker/CVE-2024-9936
• https://ubuntu.com/security/CVE-2024-9936
• https://www.mozilla.org/en-US/security/advisories/mfsa2024-53/#CVE-2024-9936

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2024-53

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-9936

Frequently Asked Questions

• What is the severity of CVE-2024-9936?

  CVE-2024-9936 has been classified as a moderate severity vulnerability.

• How do I fix CVE-2024-9936?

  To fix CVE-2024-9936, update your affected software to at least Firefox version 132.0-1.

• What software is affected by CVE-2024-9936?

  CVE-2024-9936 affects Mozilla Firefox versions prior to 132.0 and the Debian package of Firefox versions prior to 132.0-1.

• What can an attacker do with CVE-2024-9936?

  An attacker exploiting CVE-2024-9936 may manipulate the selection node cache, potentially leading to crashes.

• Is CVE-2024-9936 exploitable remotely?

  Yes, CVE-2024-9936 may be exploitable remotely through malicious web pages.