The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 7, 2024 | Jun 11, 2024 |
| Mfsa2024 25 | — | Upgrade to Mozilla Firefox version 127.0Upgrade to the latest version of Mozilla Firefox | Jun 12, 2024 | Jun 11, 2024 |
| Ubuntu | — | Upgrade firefox | Jul 4, 2024 | Jun 11, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub