CVE-2024-6605

2024-07-0914:25:57

mozilla

github.com

firefox android vulnerability

permission prompt

tapjacking

cve-2024-6605

AI Score

6.1

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox < 128.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*"
    ],
    "vendor": "mozilla",
    "product": "firefox",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "128",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]