vulnerability

MFSA2024-02 Firefox: Security Vulnerabilities fixed in Firefox ESR 115.7 (CVE-2024-0742)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Jan 23, 2024

Added

Jan 24, 2024

Modified

Mar 27, 2026

Description

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Solution

mozilla-firefox-esr-upgrade-115_7

References

CVE-2024-0742
https://attackerkb.com/topics/CVE-2024-0742
EUVD-EUVD-2024-16531
http://www.mozilla.org/security/announce/2024/mfsa2024-02.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16531

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report