A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
2024-03-19T12:15:09.007
2025-04-01T16:26:40.040
Analyzed
CVSSv3.1: 5.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | mozilla | firefox | < 115.9.0 | Yes |
| Application | mozilla | firefox | < 124.0 | Yes |
| Application | mozilla | thunderbird | < 115.9.0 | Yes |
| Operating System | debian | debian_linux | 10.0 | Yes |