Mozilla sent Firefox Version 131.0.2 to the release channel. Firefox ESR versions were updated to ESR 128.3.1 and ESR 115.16.1.
The update includes one (1) critical security update. The update is critical due to an attacker achieving code execution in the content process by exploiting a use-after-free in Animation timelines. There are reports of this vulnerability being exploited in the wild.
Critical
#CVE-2024-9680: Use-after-free in Animation timeline
Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox." Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.
References
The update includes one (1) critical security update. The update is critical due to an attacker achieving code execution in the content process by exploiting a use-after-free in Animation timelines. There are reports of this vulnerability being exploited in the wild.
Critical
#CVE-2024-9680: Use-after-free in Animation timeline
Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox." Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.
References