CVE-2024-38312CWE-922

CVE-2024-38312

Medium · published June 14, 2024

CVSS v3.1

6.5

EPSS

Percentile

20.9

In the wild

Unconfirmed

What it is

When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00294 · 20.9th percentile
Weakness: CWE-922 · Insecure Storage of Sensitive Information
Published: 2024-06-14T00:15Z

Affected products (1)

Product	Versions	Fixed in
mozilla/firefox_mobile	< 127.0	127.0

References (4)

https://bugzilla.mozilla.org/show_bug.cgi?id=1878578 · [email protected]https://www.mozilla.org/security/advisories/mfsa2024-27/ · [email protected]https://bugzilla.mozilla.org/show_bug.cgi?id=1878578 · af854a3a-2127-422b-91ae-364da2661108 https://www.mozilla.org/security/advisories/mfsa2024-27/ · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

13 JUN 20:01Z
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after…
cvelistv5