RHSA-2024:10704

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog.

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4.

Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension.

A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack.

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification.

Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext.

An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks.