The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Project Subscriptions

Vendors Products
Mozilla Subscribe
Firefox Subscribe
Firefox Esr Subscribe
Thunderbird Subscribe
Enterprise Linux Subscribe
Rhel Aus Subscribe
Rhel E4s Subscribe
Rhel Els Subscribe
Rhel Eus Subscribe
Rhel Tus Subscribe
Advisories
Source ID Title
Debian DSA Debian DSA DSA-5740-1 firefox-esr security update
Debian DSA Debian DSA DSA-5744-1 thunderbird security update
Ubuntu USN Ubuntu USN USN-6966-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-6995-1 Thunderbird vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 16 Aug 2024 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
Redhat rhel Aus
Redhat rhel E4s
Redhat rhel Els
Redhat rhel Eus
Redhat rhel Tus
CPEs cpe:/a:redhat:enterprise_linux:8
cpe:/a:redhat:enterprise_linux:9
cpe:/a:redhat:rhel_aus:8.2
cpe:/a:redhat:rhel_aus:8.4
cpe:/a:redhat:rhel_aus:8.6
cpe:/a:redhat:rhel_e4s:8.4
cpe:/a:redhat:rhel_e4s:8.6
cpe:/a:redhat:rhel_e4s:9.0
cpe:/a:redhat:rhel_eus:8.8
cpe:/a:redhat:rhel_eus:9.2
cpe:/a:redhat:rhel_tus:8.4
cpe:/a:redhat:rhel_tus:8.6
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat
Redhat enterprise Linux
Redhat rhel Aus
Redhat rhel E4s
Redhat rhel Els
Redhat rhel Eus
Redhat rhel Tus

Mon, 12 Aug 2024 16:30:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:mozilla:firefox_esr:128.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:128.0.1:*:*:*:*:*:*:*

Thu, 08 Aug 2024 23:00:00 +0000

Type Values Removed Values Added
Title Mozilla: Document content could partially obscure security prompts mozilla: Document content could partially obscure security prompts
References

Thu, 08 Aug 2024 13:15:00 +0000

Type Values Removed Values Added
Title mozilla: From NVD collector Mozilla: Document content could partially obscure security prompts
References

Wed, 07 Aug 2024 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Mozilla thunderbird
CPEs cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Vendors & Products Mozilla thunderbird

Wed, 07 Aug 2024 19:30:00 +0000

Type Values Removed Values Added
Title mozilla: From NVD collector
References
Metrics threat_severity

None

threat_severity

Moderate


Tue, 06 Aug 2024 22:30:00 +0000

Type Values Removed Values Added
Description The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1. The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published:

Updated: 2024-08-07T20:55:22.507Z

Reserved: 2024-08-05T23:30:20.798Z

Link: CVE-2024-7529

cve-icon Vulnrichment

Updated: 2024-08-06T13:31:57.119Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-06T13:15:57.657

Modified: 2024-08-12T16:09:09.390

Link: CVE-2024-7529

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-08-06T00:00:00Z

Links: CVE-2024-7529 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses