Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-1549

If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

Published

2024-02-20T14:15:08.683

Last Modified

2025-03-27T14:37:40.907

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox < 115.8.0 Yes
Application mozilla firefox < 123.0 Yes
Application mozilla thunderbird < 115.8.0 Yes
Operating System debian debian_linux 10.0 Yes
References