CVE-2024-6608

Cursor could be moved out of the viewport using pointerlock.

Medium · published July 9, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.5th percentile
Published
2024-07-09T14:25Z
EPSS history
Timeline
  • 09 JUL 14:25Z
    Cursor could be moved out of the viewport using pointerlock.
    cvelistv5