Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-12548
HistoryMar 01, 2024 - 12:00 a.m.

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-12548)

2024-03-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
mozilla firefox
security bypass
vulnerability
exit fullscreen mode
requestpointerlock
unintended privileges
attacker
mouse repositioned

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security bypass vulnerability that originates from the use of a combination of exit fullscreen mode and requestPointerLock to cause the user’s mouse to be accidentally repositioned, which can be exploited by an attacker to inadvertently grant unintended privileges.