Assessment policy: CRITICAL and above · Removed before disclosure · All retained history

Last analyzed: 10/30/2026, 9:15:36 AM UTC

CRITICAL · CVSS 9.8

Known exploited

3 endpoints with potential past exposure

Use-after-free in Firefox animation timelines can allow code execution in the content process.

NVD publication: 10/9/2024, 1:15:12 PM UTC

Mozilla Firefox 130.0.1

9/20/2024, 12:00:00 AM UTC — 10/8/2024, 12:00:00 AM UTC

NVD publication: 10/9/2024, 1:15:12 PM UTC

Recorded before publication: 18.0 days

Applicability confidence: HIGH · Coverage: FRESH

Match details

Resolved product and recorded version match the affected range below 131.0.2.

Mozilla Firefox 130.0.1

9/22/2024, 12:00:00 AM UTC — 10/6/2024, 12:00:00 AM UTC

NVD publication: 10/9/2024, 1:15:12 PM UTC

Recorded before publication: 14.0 days

Applicability confidence: HIGH · Coverage: FRESH

Match details

Resolved product and recorded version match the affected range below 131.0.2.

Collection gaps limit coverage for this period.

Mozilla Firefox 130.0.1

9/20/2024, 12:00:00 AM UTC — 9/25/2024, 12:00:00 AM UTC

NVD publication: 10/9/2024, 1:15:12 PM UTC

Recorded before publication: 5.0 days

Applicability confidence: HIGH · Coverage: FRESH

Match details

Resolved product and recorded version match the affected range below 131.0.2.

Mozilla Firefox 130.0.1

9/28/2024, 12:00:00 AM UTC — 10/7/2024, 12:00:00 AM UTC

NVD publication: 10/9/2024, 1:15:12 PM UTC

Recorded before publication: 9.0 days

Applicability confidence: HIGH · Coverage: INCOMPLETE

Match details

Resolved product and recorded version match the affected range below 131.0.2.

Coverage gap: 10/3/2024, 12:00:00 AM UTC — 10/4/2024, 12:00:00 AM UTC