A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefox-x11Upgrade firefoxUpgrade thunderbird | Dec 6, 2024 | Nov 26, 2024 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade firefoxUpgrade thunderbird | Aug 8, 2025 | Nov 26, 2024 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esr | Dec 2, 2024 | Nov 26, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/spidermonkey.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jan 24, 2025 | Nov 26, 2024 |
| Mfsa2024 63 | — | Upgrade to Mozilla Firefox version 133.0 | Nov 27, 2024 | Nov 26, 2024 |
| Mfsa2024 64 | — | Upgrade to Mozilla Firefox ESR version 128.5 | Nov 27, 2024 | Nov 26, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 128.5 | Nov 27, 2024 | Nov 26, 2024 |
| Oracle_linux | — | Upgrade firefox-x11Upgrade firefoxUpgrade thunderbird | Dec 3, 2024 | Nov 26, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-coreUpgrade qemu-kvm-commonUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-block-rbdUpgrade thunderbird-debugsourceUpgrade thunderbirdUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-ui-openglUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade firefoxUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade firefox-x11Upgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvmUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoNo solution existsUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-guest-agentUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-ui-dbus-debuginfo | Feb 10, 2025 | Nov 26, 2024 |
| Rocky_linux | — | Upgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-openglUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade thunderbirdUpgrade firefoxUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agentUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade thunderbird-debugsourceUpgrade qemu-kvm-coreUpgrade qemu-kvm-ui-egl-headlessUpgrade firefox-debugsourceUpgrade thunderbird-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade firefox-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-pr-helperUpgrade qemu-img-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-gpu-ccw | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade mozillathunderbird-translations-commonUpgrade mozjs128-develUpgrade mozillafirefox-translations-otherUpgrade mozillafirefox-translations-commonUpgrade mozjs128Upgrade mozillafirefox-branding-upstreamUpgrade mozillathunderbird-translations-otherUpgrade mozillathunderbirdUpgrade mozillafirefoxUpgrade libmozjs-128-0Upgrade mozillafirefox-devel | Jan 3, 2025 | Nov 26, 2024 |
| Ubuntu | — | Upgrade firefox | Dec 4, 2024 | Nov 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub