Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-1550

A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

Published

2024-02-20T14:15:08.733

Last Modified

2025-03-27T20:15:21.197

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-1021
  • Type: Secondary
    CWE-1021
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox < 115.8.0 Yes
Application mozilla firefox < 123.0 Yes
Application mozilla thunderbird < 115.8.0 Yes
Operating System debian debian_linux 10.0 Yes
References