The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-firefoxalma-upgrade-firefox-x11alma-upgrade-thunderbird | Aug 22, 2024 | Aug 6, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-firefoxamazon-linux-ami-2-upgrade-firefox-debuginfoamazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo | Sep 6, 2024 | Aug 6, 2024 | |
| Debian | debian-upgrade-firefox-esrdebian-upgrade-thunderbird | Aug 8, 2024 | Aug 6, 2024 | |
| Freebsd | freebsd-upgrade-package-firefox | Aug 14, 2024 | Aug 13, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-spidermonkeygentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Dec 9, 2024 | Aug 6, 2024 | |
| Mfsa2024 33 | mozilla-firefox-upgrade-129_0 | Aug 7, 2024 | Aug 6, 2024 | |
| Mfsa2024 34 | mozilla-firefox-esr-upgrade-115_14 | Aug 7, 2024 | Aug 6, 2024 | |
| Mfsa2024 35 | mozilla-firefox-esr-upgrade-128_1 | Aug 7, 2024 | Aug 6, 2024 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-115_14 | Aug 7, 2024 | Aug 6, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-firefox-x11oracle-linux-upgrade-thunderbird | Oct 16, 2024 | Aug 6, 2024 |
| Redhat_linux | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-firefox-debugsourceredhat-upgrade-firefox-x11redhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource | Aug 22, 2024 | Aug 6, 2024 | |
| Rocky_linux | rocky-upgrade-firefoxrocky-upgrade-firefox-debuginforocky-upgrade-firefox-debugsourcerocky-upgrade-thunderbirdrocky-upgrade-thunderbird-debuginforocky-upgrade-thunderbird-debugsource | May 8, 2025 | Aug 6, 2024 | |
| Suse | — | suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-slesuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | Aug 14, 2024 | Aug 6, 2024 |
| Ubuntu | ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird | Aug 20, 2024 | Aug 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub