Firefox Remote Code Execution: CVE-2024-9680

CVE-2024-9680 is a critical, actively exploited use-after-free vulnerability in Mozilla’s web developer tools that allows remote arbitrary code execution simply by visiting a malicious webpage; affected products include multiple Firefox and Thunderbird versions (and other Gecko-based browsers such as Tor Browser). The advisory urges immediate patching, suggests temporary migration to Chromium-based browsers if patches cannot be deployed, and recommends application control and ringfencing mitigations to reduce post-exploitation risks such as data exfiltration and ransomware.