fr Sign in

7.5 High

CVE-2024-10463 Video frames could have been leaked between origins in some situations

Description

Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.

Affected products and versions

Product	Affected versions	Fixed in
Firefox 132	earliest → < 132	132
Firefox ESR 115.17	earliest → < 115.17	115.17
Thunderbird 132	earliest → < 132	132
firefox_esr 128.4	earliest → < 128.4	128.4
firefox_esr 115.7	earliest → < 115.7	115.7

References

bugzilla.mozilla.org bugzilla.mozilla.org
www.mozilla.org www.mozilla.org
www.mozilla.org www.mozilla.org
www.mozilla.org www.mozilla.org
www.mozilla.org www.mozilla.org
www.mozilla.org www.mozilla.org

Timeline

Published October 29, 2024
Last modified November 3, 2025

The 2221 CVEs of Firefox →

CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component 8.8 High CVE-2026-118027 Frame poisoning in the Layout component 9.1 Critical CVE-2026-118024 Use-after-free in the Graphics: Text component 8.8 High CVE-2026-118025 Other issue in the SVG component 8.8 High

Track this CVE