CVE-2024-9936: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vulnerability affects Firefox < 131.0.3.

Affected products

• Mozilla Firefox: before 131.0.3 (fixed in 131.0.3)

Published 2024-10-14. Last modified 2026-06-17.