Is CVE-2024-11696 in the CISA KEV catalog?

No. CVE-2024-11696 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-11696?

CVE-2024-11696 has a CVSS v3 base score of 5.4 (MEDIUM).

What is the EPSS score for CVE-2024-11696?

CVE-2024-11696 has an EPSS score of 0.35% (27th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-11696?

Upgrade firefox on debian unstable to 133.0-1 or later. Fixes are available for 103 affected products.

CVE & CISA-KEV Catalog

CVE-2024-11696

MEDIUM

5.4

CVSS v3

NVD

Description

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

CWE-347

How to fix

Remediation Available

firefoxDebian

Fixed in:133.0-1CVE-2024-11696

firefoxRed Hat / RHEL

Fixed in:0:128.5.1-1.el7_9RHSA-2024:10881

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_2RHSA-2024:10844

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_2RHSA-2024:10844

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_0RHSA-2024:10743

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

firefoxRocky

Fixed in:0:128.5.1-1.el7_9RHSA-2024:10881

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_2RHSA-2024:10844

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_0RHSA-2024:10743

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

firefox-debuginfoRed Hat / RHEL

Fixed in:0:128.5.1-1.el7_9RHSA-2024:10881

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el8_2RHSA-2024:10844

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el9_0RHSA-2024:10743

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

firefox-debuginfoRocky

Fixed in:0:128.5.1-1.el7_9RHSA-2024:10881

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_2RHSA-2024:10844

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el9_0RHSA-2024:10743

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

firefox-debugsourceRed Hat / RHEL

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_2RHSA-2024:10844

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_0RHSA-2024:10743

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

firefox-debugsourceRocky

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_4RHSA-2024:10849

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_6RHSA-2024:10880

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_8RHSA-2024:10848

Fixed in:0:128.5.1-1.el8_10RHSA-2024:10752

Fixed in:0:128.5.1-1.el8_2RHSA-2024:10844

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_0RHSA-2024:10743

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

firefox-x11Rocky

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

firefox-x11Red Hat / RHEL

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_5RHSA-2024:10702

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

Fixed in:0:128.5.1-1.el9_4RHSA-2024:10742

Fixed in:0:128.5.1-1.el9_2RHSA-2024:10745

qemu-guest-agentRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-guest-agentRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-guest-agent-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-guest-agent-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-imgRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-imgRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-img-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-img-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvmRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvmRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-audio-dbus-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-audio-dbus-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-audio-paRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-audio-paRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-audio-pa-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-audio-pa-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-blkioRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-blkioRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-blkio-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-blkio-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-curlRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-curlRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-curl-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-curl-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-rbdRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-rbdRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-rbd-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-block-rbd-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-commonRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-commonRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-common-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-common-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-coreRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-coreRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-core-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-core-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-debugsourceRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-debugsourceRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpuRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpuRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-ccwRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-ccwRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-ccw-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-ccw-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-pciRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-pciRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-pci-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-gpu-pci-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-vgaRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-vgaRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-vga-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-display-virtio-vga-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-usb-hostRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-usb-hostRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-usb-host-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-usb-host-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-usb-redirectRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-usb-redirectRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-usb-redirect-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-device-usb-redirect-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-docsRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-docsRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-tests-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-tests-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-toolsRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-toolsRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-tools-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-tools-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-dbus-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-dbus-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-egl-headlessRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-egl-headlessRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-egl-headless-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-egl-headless-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-openglRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-openglRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-opengl-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-kvm-ui-opengl-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-pr-helperRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-pr-helperRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-pr-helper-debuginfoRocky

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

qemu-pr-helper-debuginfoRed Hat / RHEL

Fixed in:18:10.1.0-16.el10_2RHSA-2026:18479

thunderbirdRocky

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_4RHSA-2024:10733

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_4RHSA-2024:10733

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_2RHSA-2024:10704

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

thunderbirdRed Hat / RHEL

Fixed in:0:128.5.0-1.el8_4RHSA-2024:10733

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_2RHSA-2024:10704

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

thunderbird-debuginfoRed Hat / RHEL

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_4RHSA-2024:10733

Fixed in:0:128.5.0-1.el8_2RHSA-2024:10704

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

thunderbird-debuginfoRocky

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_2RHSA-2024:10704

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_4RHSA-2024:10733

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

thunderbird-debugsourceRed Hat / RHEL

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_2RHSA-2024:10704

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_4RHSA-2024:10733

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

thunderbird-debugsourceRocky

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_2RHSA-2024:10704

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_8RHSA-2024:10710

Fixed in:0:128.5.0-1.el8_6RHSA-2024:10734

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_4RHSA-2024:10733

Fixed in:0:128.5.0-1.el8_10RHSA-2024:10591

Fixed in:0:128.5.0-1.el8_4RHSA-2024:10733

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

Fixed in:0:128.5.0-1.el9_2RHSA-2024:10667

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_0RHSA-2024:10703

Fixed in:0:128.5.0-1.el9_4RHSA-2024:10748

Fixed in:0:128.5.0-1.el9_5RHSA-2024:10592

firefoxUbuntu

Fixed in:133.0+build2-0ubuntu0.20.04.1USN-7134-1

DeveloperEditionWindows application

Affected:133.0Fixed in:133.0Mozilla

Affected:128.5.0Fixed in:128.5.0Mozilla

Mozilla Firefox (en-US)Windows application

Affected:133.0Fixed in:133.0Mozilla

Affected:128.5.0Fixed in:128.5.0Mozilla

Mozilla Thunderbird (en-US)Windows application

Affected:128.5.0Fixed in:128.5.0Mozilla

Affected:129.0 133.0Fixed in:133.0Mozilla

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionRequired

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityLow

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Exploit Intelligence

0.35%probability of exploitation in 30 days

27thpercentile

Low risk: more likely to be exploited than 27% of all known CVEs.

References

Vendor Advisory4

Issue Tracking1

bugzilla.mozilla.org

Other references1

lists.debian.org

Related Vulnerabilities

Other CWE-347 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2018-16042	Medium	6.5	82%	-	-
CVE-2025-59718	Critical	9.8	66%	KEV	Fix
CVE-2025-25292	Critical	9.8	64%	-	Fix
CVE-2021-22160	Critical	9.8	53%	-	Fix
CVE-2013-3900	Medium	5.5	45%	KEV	-
CVE-2018-0114	High	7.5	43%	-	Fix

Embed a live status badge for CVE-2024-11696

Markdown

[![CVE-2024-11696](https://tridentstack.com/cve/badge/CVE-2024-11696.svg)](https://tridentstack.com/cve/CVE-2024-11696)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-11696"><img src="https://tridentstack.com/cve/badge/CVE-2024-11696.svg" alt="CVE-2024-11696"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-11-03.