Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-12548
HistoryMar 01, 2024 - 12:00 a.m.

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-12548)

2024-03-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
mozilla firefox
security bypass
vulnerability
exit fullscreen mode
requestpointerlock
unintended privileges
attacker
mouse repositioned

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

10.3%

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security bypass vulnerability that originates from the use of a combination of exit fullscreen mode and requestPointerLock to cause the user’s mouse to be accidentally repositioned, which can be exploited by an attacker to inadvertently grant unintended privileges.