CVE-2024-7652

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476 CWE-843

Affected software

No affected versions have been published.

Timeline

Published: Sep 6, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-76546.1An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-discovery feature was a CVE-2024-76554.8The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Sc CVE-2024-76568.8The Image Hotspot by DevVN plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.5 via deseri CVE-2024-76575.4A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/update_rows/CVE-2024-76585.3A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview CVE-2024-76597.5A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string CVE-2024-76606.1A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an un CVE-2024-76618.8A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects th CVE-2024-76626.5A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerabilit CVE-2024-76635.3A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects some CVE-2024-76644.3A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown fun CVE-2024-76654.3A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability