CVE-2024-11704 - Double-Free Vulnerability in sec_pkcs7_decoder_start_decrypt() – Details, Exploitation, and Safeguards
CVE-2024-11704 is a critical double-free vulnerability discovered in Mozilla's NSS (Network Security Services) stack, specifically in the sec_pkcs7_decoder_start_decrypt() function.
CVE-2024-11705 - Firefox and Thunderbird Crash via NULL Pointer in NSC_DeriveKey (with Exploit Details)
In early 2024, security researchers and Mozilla developers uncovered a crash bug affecting the NSC_DeriveKey function within the NSS (Network Security Services) library, which
CVE-2024-11696 - Bypassing Add-On Signature Validation in Firefox and Thunderbird Due to Unhandled Exceptions
In early 2024, a notable security issue was discovered affecting Mozilla Firefox, Firefox ESR, and Thunderbird. The vulnerability, tracked as CVE-2024-11696, exposes a flaw in
Episode
00:00:00
00:00:00