CVE-2024-2605

2024-03-1912:15:08

[email protected]

web.nvd.nist.gov

windows error reporter

arbitrary code

sandbox escaping

vulnerability

firefox

thunderbird

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.