Firefox Zero-Day Under Attack: Update Your Browser Immediately! Mozilla has revealed that a critical security flaw impacting Firefox and Firefox Extended Support Release (ESR) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2024-9680, discovered by ESET researcher Damien Schaeffer, has been described as a use-after-free bug in the Animation timeline component. "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines," Mozilla said in a Wednesday advisory. The issue has been addressed in the following versions of the web browser: Firefox 131.0.2 Firefox ESR 128.3.1, and Firefox ESR 115.16.1. See more: https://thehackernews.com/2024/10/mozilla-warns-of-active-exploitation-in.html https://www.bleepingcomputer.com/news/security/mozilla-fixes-firefox-zero-day-actively-exploited-in-attacks/ #security #cve