CVE-2024-11702
published 2024-11-26CVE-2024-11702: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history…
PriorityP338high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.54%
41.7th percentile
Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 134.0-1 (sid) | firefox 134.0-1 (sid) |
| mozilla | firefox | < 133.0 | 133.0 |
| mozilla | firefox | — | — |
| mozilla | firefox | >= unspecified < 133 | 133 |
| mozilla | thunderbird | < 133.0 | 133.0 |
| mozilla | thunderbird | >= unspecified < 133 | 133 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
firefox: thunderbird: Inadequate Clipboard Protection in Private Browsing Mode on Android
vendor_redhat·2024-11-26·CVSS 7.5
CVE-2024-11702 [HIGH] CWE-922 firefox: thunderbird: Inadequate Clipboard Protection in Private Browsing Mode on Android
firefox: thunderbird: Inadequate Clipboard Protection in Private Browsing Mode on Android
Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.
A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled.
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Package: firefox (Red Hat Enterprise Linux 10) - Not affected
Packa
Debian
CVE-2024-11702: firefox - Copying sensitive information from Private Browsing tabs on Android, such as pas...
vendor_debian·2024·CVSS 7.5
CVE-2024-11702 [HIGH] CVE-2024-11702: firefox - Copying sensitive information from Private Browsing tabs on Android, such as pas...
Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.
Scope: local
sid: resolved (fixed in 134.0-1)
Mozilla
Mozilla Foundation Security Advisory 2024-67: CVE-2024-11702
vendor_mozilla·CVSS 7.5
CVE-2024-11702 [HIGH] Mozilla Foundation Security Advisory 2024-67: CVE-2024-11702
Mozilla Foundation Security Advisory 2024-67
CVE: CVE-2024-11702
Product: Thunderbird
Impact: high
Fixed in: Thunderbird 133
Mozilla
Mozilla Foundation Security Advisory 2024-63: CVE-2024-11702
vendor_mozilla·CVSS 7.5
CVE-2024-11702 [HIGH] Mozilla Foundation Security Advisory 2024-63: CVE-2024-11702
Mozilla Foundation Security Advisory 2024-63
CVE: CVE-2024-11702
Product: Firefox
Impact: high
Fixed in: Firefox 133
GHSA
GHSA-7r4q-q89f-2mcg: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboar
ghsa_unreviewed·2024-11-26
CVE-2024-11702 [HIGH] CWE-838 GHSA-7r4q-q89f-2mcg: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboar
Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.
OSV
CVE-2024-11702: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboar
osv·2024-11-26·CVSS 7.5
CVE-2024-11702 [HIGH] CVE-2024-11702: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboar
Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-11-26
Published