CVE-2024-10004
published 2024-10-15CVE-2024-10004: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon…
PriorityP345critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
0.38%
29.7th percentile
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 131.2.0 | 131.2.0 |
| mozilla | firefox | — | — |
| mozilla | firefox_for_ios | >= unspecified < 131.2 | 131.2 |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
osv9.1CRITICAL
vendor_debian9.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2024-10004: firefox - Opening an external link to an HTTP website when Firefox iOS was previously clos...
vendor_debian·2024·CVSS 9.1
CVE-2024-10004 [CRITICAL] CVE-2024-10004: firefox - Opening an external link to an HTTP website when Firefox iOS was previously clos...
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2024-54: CVE-2024-10004
vendor_mozilla·CVSS 9.1
CVE-2024-10004 [CRITICAL] Mozilla Foundation Security Advisory 2024-54: CVE-2024-10004
Mozilla Foundation Security Advisory 2024-54
CVE: CVE-2024-10004
Product: Firefox for iOS
Impact: moderate
Fixed in: Firefox for iOS 131.2
GHSA
GHSA-wh67-cc45-g7cf: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock
ghsa_unreviewed·2024-10-16
CVE-2024-10004 [CRITICAL] CWE-1021 GHSA-wh67-cc45-g7cf: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
OSV
CVE-2024-10004: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock
osv·2024-10-15·CVSS 9.1
CVE-2024-10004 [CRITICAL] CVE-2024-10004: Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
No detection rules found.
No public exploits indexed.
2024-10-15
Published