A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.
History

Thu, 10 Oct 2024 02:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_eus:8.8

Tue, 08 Oct 2024 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Els
Redhat rhel Tus
CPEs cpe:/a:redhat:enterprise_linux:8
cpe:/a:redhat:rhel_aus:8.4
cpe:/a:redhat:rhel_aus:8.6
cpe:/a:redhat:rhel_e4s:8.4
cpe:/a:redhat:rhel_e4s:8.6
cpe:/a:redhat:rhel_tus:8.4
cpe:/a:redhat:rhel_tus:8.6
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els
Redhat rhel Tus

Fri, 04 Oct 2024 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Aus
Redhat rhel E4s
Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_aus:8.2
cpe:/a:redhat:rhel_e4s:9.0
cpe:/a:redhat:rhel_eus:9.2
Vendors & Products Redhat rhel Aus
Redhat rhel E4s
Redhat rhel Eus

Thu, 03 Oct 2024 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 02 Oct 2024 01:15:00 +0000

Type Values Removed Values Added
Title firefox: thunderbird: Compromised content process can bypass site isolation
References
Metrics threat_severity

None

threat_severity

Important


Tue, 01 Oct 2024 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Mozilla
Mozilla firefox
Mozilla firefox Esr
Mozilla thunderbird
Weaknesses CWE-346
CPEs cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Vendors & Products Mozilla
Mozilla firefox
Mozilla firefox Esr
Mozilla thunderbird
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 01 Oct 2024 17:00:00 +0000

Type Values Removed Values Added
References

Tue, 01 Oct 2024 15:30:00 +0000

Type Values Removed Values Added
Description A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2024-10-01T15:13:18.862Z

Updated: 2024-10-01T18:23:43.572Z

Reserved: 2024-10-01T06:10:04.271Z

Link: CVE-2024-9392

cve-icon Vulnrichment

Updated: 2024-10-01T18:21:21.764Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-10-01T16:15:10.570

Modified: 2024-10-04T13:51:25.567

Link: CVE-2024-9392

cve-icon Redhat

Severity : Important

Publid Date: 2024-10-01T15:13:18Z

Links: CVE-2024-9392 - Bugzilla