Windows apps · Application version · October 2, 2024

Mozilla Firefox (en-US) 131.0

Mozilla Firefox (en-US) 131.0, released October 2, 2024, fixes 13 CVEs in Mozilla Firefox (en-US). None of them is reported as exploited. Patch Radar priority: High. The latest Mozilla Firefox (en-US) is 159.0, which also fixes every one of these CVEs.

High

Superseded. The latest Mozilla Firefox (en-US) is 159.0, which also fixes every CVE on this page. Install that instead.

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0074

54th percentile

Priority of the 13 CVEs

Patch now 0
                                Urgent 0
                                High 9
                                Routine 4

Applies to

Product	Version
Mozilla Firefox (en-US)	131.0

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-9401	Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer	9.8	0.0074	None reported
High	CVE-2024-9402	Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer	9.8	0.0062	None reported
High	CVE-2024-9396	Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer	8.8	0.0059	None reported
High	CVE-2024-9392	Mozilla Firefox ESR and 7 others: Origin Validation Error	9.8	0.0054	None reported
High	CVE-2024-9394	Mozilla Firefox ESR and 7 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	7.6	0.0052	None reported
High	CVE-2024-9400	Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer	8.8	0.0051	None reported
High	CVE-2024-9399	Mozilla Firefox ESR and 7 others: Improper Resource Shutdown or Release	7.5	0.0050	None reported
High	CVE-2024-9403	Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer	7.5	0.0045	None reported
High	CVE-2024-9393	Mozilla Firefox ESR and 7 others: Origin Validation Error	7.6	0.0040	None reported
Routine	CVE-2024-9398	Mozilla Firefox ESR and 7 others: Observable Discrepancy	5.3	0.0057	None reported
Routine	CVE-2024-9397	Mozilla Firefox ESR and 7 others: Improper Restriction of Rendered UI Layers or Frames	6.1	0.0037	None reported
Routine	CVE-2024-9395	Mozilla Firefox ESR and 4 others: A specially crafted filename containing a large number of spaces could obscure the file's extension when…	5.3	0.0033	None reported
Routine	CVE-2024-9391	Mozilla Firefox ESR and 4 others: Authentication Bypass by Spoofing	6.5	0.0028	None reported

Other Mozilla Firefox (en-US) versions with security fixes

Mozilla Firefox (en-US) 157.0.1
Mozilla Firefox (en-US)
Mozilla Firefox (en-US) 157.0
Mozilla Firefox (en-US)
Mozilla Firefox (en-US) 156.0
Mozilla Firefox (en-US)
Mozilla Firefox (en-US) 155.0
Mozilla Firefox (en-US)
Mozilla Firefox (en-US) 154.0
Mozilla Firefox (en-US)
Mozilla Firefox (en-US) 153.0
Mozilla Firefox (en-US)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/windows-app/mozilla.firefox-131.0">Mozilla Firefox (en-US) 131.0 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Is it current everywhere?

Patchblox finds every install below the fixed version, including per-user copies, and updates them from a signed catalog package.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.