Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3943-1 | firefox-esr security update |
Debian DLA |
DLA-3944-1 | thunderbird security update |
Debian DSA |
DSA-5801-1 | firefox-esr security update |
Debian DSA |
DSA-5803-1 | thunderbird security update |
Ubuntu USN |
USN-7086-1 | Firefox vulnerabilities |
Mon, 03 Nov 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 15 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Fri, 01 Nov 2024 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat
Redhat enterprise Linux Redhat rhel Aus Redhat rhel E4s Redhat rhel Els Redhat rhel Eus Redhat rhel Tus |
|
| CPEs | cpe:/a:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:9 cpe:/a:redhat:rhel_aus:8.2 cpe:/a:redhat:rhel_aus:8.4 cpe:/a:redhat:rhel_aus:8.6 cpe:/a:redhat:rhel_e4s:8.4 cpe:/a:redhat:rhel_e4s:8.6 cpe:/a:redhat:rhel_e4s:9.0 cpe:/a:redhat:rhel_eus:8.8 cpe:/a:redhat:rhel_eus:9.2 cpe:/a:redhat:rhel_tus:8.4 cpe:/a:redhat:rhel_tus:8.6 cpe:/o:redhat:rhel_els:7 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux Redhat rhel Aus Redhat rhel E4s Redhat rhel Els Redhat rhel Eus Redhat rhel Tus |
Thu, 31 Oct 2024 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-281 | |
| Metrics |
cvssV3_1
|
ssvc
|
Thu, 31 Oct 2024 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mozilla
Mozilla firefox Mozilla thunderbird |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Mozilla
Mozilla firefox Mozilla thunderbird |
|
| Metrics |
cvssV3_1
|
cvssV3_1
|
Wed, 30 Oct 2024 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | firefox: Permission leak via embed or object elements | firefox: thunderbird: Permission leak via embed or object elements |
| Weaknesses | CWE-280 |
Wed, 30 Oct 2024 01:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | firefox: Permission leak via embed or object elements | |
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Tue, 29 Oct 2024 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132. | |
| References |
|
|
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2025-11-03T21:51:08.617Z
Reserved: 2024-10-28T14:23:06.564Z
Link: CVE-2024-10458
Updated: 2025-11-03T21:51:08.617Z
Status : Modified
Published: 2024-10-29T13:15:03.623
Modified: 2025-11-03T22:16:34.777
Link: CVE-2024-10458
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN