CVE-2024-11700

Malicious websites may have been able to perform user intent confirmation through tapjacking

High · published November 26, 2024

CVSS v3.1
8.1
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00478 · 40.3th percentile
Published
2024-11-26T13:33Z
EPSS history
Timeline
  • 26 NOV 13:33Z
    Malicious websites may have been able to perform user intent confirmation through tapjacking
    cvelistv5