Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1836921 | Issue Tracking |
| https://www.mozilla.org/security/advisories/mfsa2024-63/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2024-67/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
03 Apr 2025, 13:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mozilla thunderbird
Mozilla Mozilla firefox |
|
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1836921 - Issue Tracking | |
| References | () https://www.mozilla.org/security/advisories/mfsa2024-67/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2024-63/ - Vendor Advisory |
02 Dec 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133. |
27 Nov 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-26 14:15
Updated : 2025-04-03 13:32
NVD link : CVE-2024-11700
Mitre link : CVE-2024-11700
JSON object : View
Products Affected
mozilla
- firefox
- thunderbird
CWE
No CWE.