CVE-2024-38312
published 2024-06-13CVE-2024-38312: When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after…
PriorityP430medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
EPSS
0.29%
21.1th percentile
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 127.0 | 127.0 |
| mozilla | firefox | — | — |
| mozilla | firefox_for_ios | >= unspecified < 127 | 127 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
vendor_debian6.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2024-38312: firefox - When browsing private tabs, some data related to location history or webpage thu...
vendor_debian·2024·CVSS 6.5
CVE-2024-38312 [MEDIUM] CVE-2024-38312: firefox - When browsing private tabs, some data related to location history or webpage thu...
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2024-27: CVE-2024-38312
vendor_mozilla·CVSS 6.5
CVE-2024-38312 [MEDIUM] Mozilla Foundation Security Advisory 2024-27: CVE-2024-38312
Mozilla Foundation Security Advisory 2024-27
CVE: CVE-2024-38312
Product: Firefox for iOS
Impact: moderate
Fixed in: Firefox for iOS 127
GHSA
GHSA-ffh4-92gv-qvv5: When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle
ghsa_unreviewed·2024-06-13
CVE-2024-38312 [MEDIUM] CWE-922 GHSA-ffh4-92gv-qvv5: When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-13
Published