If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
2024-05-14T18:15:13.683
2025-04-01T17:47:50.997
Analyzed
CVSSv3.1: 4.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | mozilla | firefox | < 115.11.0 | Yes |
| Application | mozilla | firefox | < 126.0 | Yes |
| Application | mozilla | thunderbird | < 115.11.0 | Yes |
| Operating System | debian | debian_linux | 10.0 | Yes |