vulnerability
Alma Linux: CVE-2024-2609: Important: firefox security update (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:N/C:P/I:P/A:N) | Mar 19, 2024 | Apr 23, 2024 | Mar 31, 2026 |
Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Mar 19, 2024
Added
Apr 23, 2024
Modified
Mar 31, 2026
Description
The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerability affects Firefox < 124, Firefox ESR < 115.10, and Thunderbird < 115.10.
Solutions
alma-upgrade-firefoxalma-upgrade-firefox-x11alma-upgrade-thunderbird
References
- CVE-2024-2609
- https://attackerkb.com/topics/CVE-2024-2609
- CWE-356
- EUVD-EUVD-2024-27558
- https://errata.almalinux.org/8/ALSA-2024-1912.html
- https://errata.almalinux.org/8/ALSA-2024-1939.html
- https://errata.almalinux.org/9/ALSA-2024-1908.html
- https://errata.almalinux.org/9/ALSA-2024-1940.html
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27558
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.