A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-x11 | Dec 6, 2024 | Nov 26, 2024 |
| Alpine Linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-esr | Aug 8, 2025 | Nov 26, 2024 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | Dec 2, 2024 | Nov 26, 2024 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade dev-lang/spidermonkey.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jan 24, 2025 | Nov 26, 2024 |
| Mfsa2024 63 | — | Upgrade to Mozilla Firefox version 133.0Upgrade to the latest version of Mozilla Firefox | Nov 27, 2024 | Nov 26, 2024 |
| Mfsa2024 64 | — | Upgrade to Mozilla Firefox ESR version 128.5Upgrade to the latest version of Mozilla Firefox | Nov 27, 2024 | Nov 26, 2024 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 128.5 | Nov 27, 2024 | Nov 26, 2024 |
| Oracle_linux | — | Upgrade firefox-x11Upgrade thunderbirdUpgrade firefox | Dec 3, 2024 | Nov 26, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade thunderbird-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade firefoxUpgrade qemu-kvm-core-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-ui-dbus-debuginfoNo solution existsUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade firefox-debugsourceUpgrade qemu-kvm-block-blkioUpgrade qemu-guest-agentUpgrade firefox-debuginfoUpgrade firefox-x11Upgrade qemu-kvm-audio-paUpgrade qemu-kvm-block-rbdUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade thunderbird-debugsourceUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-coreUpgrade thunderbirdUpgrade qemu-kvm-ui-opengl | Feb 10, 2025 | Nov 26, 2024 |
| Rocky_linux | — | Upgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade thunderbird-debugsourceUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-coreUpgrade firefox-debugsourceUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-usb-redirectUpgrade firefox-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade thunderbird-debuginfoUpgrade qemu-imgUpgrade qemu-pr-helperUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade thunderbirdUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-docsUpgrade firefoxUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfo | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-otherUpgrade mozjs128-develUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbirdUpgrade mozjs128Upgrade mozillafirefox-branding-upstreamUpgrade libmozjs-128-0Upgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-common | Jan 3, 2025 | Nov 26, 2024 |
| Ubuntu | — | Upgrade firefox | Dec 4, 2024 | Nov 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub