CVE-2024-4367

highpriority · attend · 70EPSS 0.707 · 99 %ileexploit · PoCDEEUFRNLRUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
29 exploits · PoC
Likely / severe?
70.7% (99th) EPSS
CVSS 8.8 · high
Is it mine?
134 products
Check your exposure
Who says so?
9 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

02

cvss

Technical severity, 0–10. One row per scoring source.

8.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.6–8.8

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9
v3.15.6mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · CISA US
v3.17.5highAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.15.6mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · ENISA EU
v3.15.6mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondaryexploitability 2.2 · impact 3.4
v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · OSV
v3.15.6mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · Siemens ProductCERT DE
v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)
v3.17.5highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-754USCWE-754USCWE-754USCWE-754USCWE-754USCWE-843US
05

exploits (29)

Public proof-of-concept and weaponised exploit code.

06

affected products (134)

Products and version ranges known to be affected.

showing 20 of 134
07

advisories (10)

Vendor and ecosystem advisories describing this.

  • NCSC-2024-0218Kwetsbaarheden verholpen in Mozilla Firefox en ThunderbirdNL2024-05-15csaf · ncsc_nlNL

    Mozilla heeft kwetsbaarheden verholpen in Firefox en Thunderbird

  • NCSC-2026-0147Kwetsbaarheden verholpen in Siemens-productenNL2026-05-13csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in verschillende (OT-)producten. Het gaat onder andere om producten in de Siemens RUGGEDCOM-, SCALANCE-, SIMATIC-, SIMIT-, SINAMICS-, SIPROTEC-, SENTRON- en Solid Edge-productreeksen.

  • SSA-827383SSA-827383: Multiple Vulnerabilities in Teamcenter2026-05-12csaf · siemens_psirtDE

    Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions.

  • WID-SEC-W-2024-1151Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere SchwachstellenDeutsch2024-05-14csaf · cert_bundDE

    Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.

  • WID-SEC-W-2024-1216GitLab: Mehrere SchwachstellenDeutsch2024-05-21csaf · cert_bundDE

    Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site-Scripting-Angriff (XSS) durchzuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.

  • WID-SEC-W-2024-1605Fabasoft Folio: Schwachstelle ermöglicht CodeausführungDeutsch2024-07-11csaf · cert_bundDE

    Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Fabasoft Folio ausnutzen, um beliebigen Programmcode auszuführen.

  • WID-SEC-W-2026-2358WebKitGTK: Mehrere SchwachstellenDeutsch2026-07-14csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen daten zu manipulieren und Sicherheitsvorkehrungen zu umgehen

  • GHSA-wgrm-67xf-hhpqPDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF2024-05-07ghsa · osvUS

    ### Impact If pdf.js is used to load a malicious PDF, and PDF.js is configured with `isEvalSupported` set to `true` (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. ### Patches The patch removes the use of `eval`: https://github.com/mozilla/pdf.js/pull/18015 ### Workarounds Set the option `isEvalSupported` to `false`. ### References https://bugzilla.mozilla.org/show_bug.cgi?id=1893645

  • ICSA-26-134-04Siemens Teamcenter2026-05-12icsa · cisa_csaf_otUS

    Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions.

  • CERTFR-2026-AVI-1350Multiples vulnérabilités dans Oracle Java SEFrançais2026-10-21vendor · certfrFR
08

also known as (7)

Other names and identifiers for this entity.

09

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otncsc_nlsiemens_psirtosvcertfrNVDCVE.orgMITRE
published 2024-05-14modified 2026-06-17
10

references (29)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan