5.5
Medium
CVE-2024-2611 A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting…
Description
A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 124 | earliest → < 124 | 124 |
| Firefox ESR 115.9 | earliest → < 115.9 | 115.9 |
| Thunderbird 115.9 | earliest → < 115.9 | 115.9 |