A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
History

Fri, 06 Dec 2024 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-367

Wed, 30 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L'}


Fri, 06 Sep 2024 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2024-07-09T14:25:56.733Z

Updated: 2024-12-06T17:31:33.808Z

Reserved: 2024-07-09T14:12:56.169Z

Link: CVE-2024-6601

cve-icon Vulnrichment

Updated: 2024-08-01T21:41:03.971Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-09T15:15:12.410

Modified: 2024-12-06T18:15:27.460

Link: CVE-2024-6601

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-09T00:00:00Z

Links: CVE-2024-6601 - Bugzilla