CVE-2024-1553

Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

• CWE-119

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1855686%2C1867982%2C1871498%2C1872296%2C1873521%2C1873577%2C1873597%2C1873866%2C1874080%2C1874740%2C1875795%2C1875906%2C1876425%2C1878211%2C1878286Issue Tracking
• https://lists.debian.org/debian-lts-announce/2024/03/msg00000.htmlMailing List
• https://lists.debian.org/debian-lts-announce/2024/03/msg00001.htmlMailing List
• https://www.mozilla.org/security/advisories/mfsa2024-05/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2024-06/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2024-07/Vendor Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1855686%2C1867982%2C1871498%2C1872296%2C1873521%2C1873577%2C1873597%2C1873866%2C1874080%2C1874740%2C1875795%2C1875906%2C1876425%2C1878211%2C1878286Issue Tracking
• https://lists.debian.org/debian-lts-announce/2024/03/msg00000.htmlMailing List
• https://lists.debian.org/debian-lts-announce/2024/03/msg00001.htmlMailing List
• https://www.mozilla.org/security/advisories/mfsa2024-05/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2024-06/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2024-07/Vendor Advisory

Published

Feb 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1547Through a series of API calls and redirects, an attacker-con…6.5
• CVE-2024-1548A website could have obscured the fullscreen notification by…4.3
• CVE-2024-1549If a website set a large custom cursor, portions of the curs…6.1
• CVE-2024-1550A malicious website could have used a combination of exiting…6.1
• CVE-2024-1551Set-Cookie response headers were being incorrectly honored i…6.1
• CVE-2024-1552Incorrect code generation could have led to unexpected numer…7.5
• CVE-2024-1554The `fetch()` API and navigation incorrectly shared the same…9.8
• CVE-2024-1555When opening a website using the `firefox://` protocol handl…8.3
• CVE-2024-1556The incorrect object was checked for NULL in the built-in pr…6.5
• CVE-2024-1557Memory safety bugs present in Firefox 122. Some of these bug…8.1
• CVE-2024-1558A path traversal vulnerability exists in the `_create_model_…7.5
• CVE-2024-1559The Link Library plugin for WordPress is vulnerable to Store…6.1