vulnerability

MFSA2024-25 Firefox: Security Vulnerabilities fixed in Firefox 127 (CVE-2024-5690)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

Published

Jun 11, 2024

Added

Jun 12, 2024

Modified

Mar 27, 2026

Description

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

Solution

mozilla-firefox-upgrade-127_0

References

CVE-2024-5690
https://attackerkb.com/topics/CVE-2024-5690
CWE-203
EUVD-EUVD-2024-46862
http://www.mozilla.org/security/announce/2024/mfsa2024-25.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46862

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report