8.8
Élevée
CVE-2024-8382 Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for…
Description
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Firefox 130 | premières → < 130 | 130 |
| Firefox ESR 115.15 | premières → < 115.15 | 115.15 |
| Thunderbird 115.15 | premières → < 115.15 | 115.15 |
| firefox_esr 128.2 | premières → < 128.2 | 128.2 |
| firefox_esr 115.15 | premières → < 115.15 | 115.15 |
Références
- bugzilla.mozilla.org bugzilla.mozilla.org
- www.mozilla.org www.mozilla.org
- www.mozilla.org www.mozilla.org
- www.mozilla.org www.mozilla.org
- www.mozilla.org www.mozilla.org
- www.mozilla.org www.mozilla.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Firefox
Les 2221 CVE de Firefox →
CVE-2026-120572
Incorrect boundary conditions in the Layout: Block and Inline component
8.8
Élevée
CVE-2026-118027
Frame poisoning in the Layout component
9.1
Critique
CVE-2026-118025
Other issue in the SVG component
8.8
Élevée
CVE-2026-118024
Use-after-free in the Graphics: Text component
8.8
Élevée