CVE-2024-6608

2024-07-0915:15:12

Alpine Linux Development Team

security.alpinelinux.org

cursor movement

vulnerability

firefox

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

21.3%

JSON

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchfirefox= 126.0.1-r0UNKNOWN
Alpine3.20-communitynoarchthunderbird= 115.11.0-r0UNKNOWN