Vulnerabilities

TI-2024-09691 CVE-2024-10463 · GHSA-4jv6-884h-v282

Observable discrepancy in Mozilla Firefox

MEDIUM 40

Video frames could have been leaked between origins in some situations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00734 Published 2024-10-29 Partial fix · 132, 128.4 +1 CWE-203

TI-2024-09687 CVE-2024-10459 · GHSA-77hv-rqc3-4gm6

LOW 34

An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00634 Published 2024-10-29 Partial fix · 132, 128.4 +1 CWE-416

TI-2024-09686 CVE-2024-10458 · GHSA-87x3-r6f2-m885

LOW 34

A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0064 Published 2024-10-29 Partial fix · 132, 128.4 +1 CWE-281