Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-11700

Опубликовано: 26 нояб. 2024
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

EPSS

Процентиль: 33%
0.00126
Низкий

8.1 High

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 8.1
ubuntu
12 месяцев назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 5.4
redhat
12 месяцев назад

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 8.1
debian
12 месяцев назад

Malicious websites may have been able to perform user intent confirmat ...

CVSS3: 8.1
github
12 месяцев назад

Malicious websites may have been able to user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

CVSS3: 8.1
fstec
12 месяцев назад

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird операционных систем Android, связанная с некорректным ограничением визуализированных слоев пользовательского интерфейса, позволяющая нарушителю выполнить атаку типа tapjacking

EPSS

Процентиль: 33%
0.00126
Низкий

8.1 High

CVSS3

Дефекты

CWE-1021