Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-1550
HistoryFeb 20, 2024 - 2:15 p.m.

CVE-2024-1550

2024-02-2014:15:08
Debian Security Bug Tracker
security-tracker.debian.org
12
malicious website
fullscreen mode
requestpointerlock
user confusion
permissions
firefox
thunderbird
vulnerability
unix} .

5.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

A malicious website could have used a combination of exiting fullscreen mode and requestPointerLock to cause the user’s mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.