TI-2024-10843 CVE-2024-11697 · GHSA-4jp9-q9g7-48gr
Code injection in Mozilla Firefox
Priority MEDIUM 42
When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog.
RHSA-2024:10702
firefox security update
Released 2024-12-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) firefox-128.5.1-1.el9_5, firefox-x11-128.5.1-1.el9_5
Fixes 6 records
TI-2024-10845 CVE-2024-11699 · GHSA-9g2q-259c-66mq
Code injection in Mozilla Firefox
Priority MEDIUM 41
Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4.
TI-2024-10840 CVE-2024-11694 · GHSA-mjcw-r3mg-3848
Cross-site scripting in Mozilla Firefox
Priority LOW 28
Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension.
TI-2024-10841 CVE-2024-11695 · GHSA-rh22-rcv2-42x3
Clickjacking in Mozilla Firefox
Priority LOW 25
A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack.
TI-2024-10842 CVE-2024-11696 · GHSA-g5wv-cvf4-2r98
Improper signature verification in Mozilla Firefox
Priority LOW 24
The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification.
TI-2024-10838 CVE-2024-11692 · GHSA-cpxj-fx45-9pgm
Authentication bypass by spoofing in Mozilla Firefox
Priority LOW 21
An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks.