8.1
High
CVE-2024-7529 The date picker could partially obscure security prompts
Description
The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 129 | earliest → < 129 | 129 |
| Firefox ESR 128.1 | earliest → < 128.1 | 128.1 |
| Thunderbird 115.14 | earliest → < 115.14 | 115.14 |
| firefox_esr 128.1 | earliest → < 128.1 | 128.1 |
| firefox_esr 115.14 | earliest → < 115.14 | 115.14 |