CVE-2024-10464
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser
High · published October 29, 2024
What it is
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing rate-limiting to this API. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00637 · 49.9th percentile
- Published
- 2024-10-29T12:19Z
EPSS history
Timeline