CVE-2024-38312
published 2024-06-13CVE-2024-38312: When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after…
PriorityP429medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
EPSS
0.29%
21.0th percentile
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox_for_ios | >= unspecified < 127 | 127 |
| mozilla | firefox_mobile | < 127.0 | 127.0 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
vendor_debian6.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2024-38312: firefox - When browsing private tabs, some data related to location history or webpage thu...
vendor_debian·2024·CVSS 6.5
CVE-2024-38312 [MEDIUM] CVE-2024-38312: firefox - When browsing private tabs, some data related to location history or webpage thu...
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2024-27: CVE-2024-38312
vendor_mozilla·CVSS 6.5
CVE-2024-38312 [MEDIUM] Mozilla Foundation Security Advisory 2024-27: CVE-2024-38312
Mozilla Foundation Security Advisory 2024-27
CVE: CVE-2024-38312
Product: Firefox for iOS
Impact: moderate
Fixed in: Firefox for iOS 127
VulDB
Mozilla Firefox up to 126 on iOS Private Tab access control
vuldb·2026-08-21·CVSS 6.5
CVE-2024-38312 [MEDIUM] Mozilla Firefox up to 126 on iOS Private Tab access control
A vulnerability was found in Mozilla Firefox up to 126 on iOS. It has been classified as critical. This impacts an unknown function of the component Private Tab Handler. Performing a manipulation results in improper access controls.
This vulnerability is reported as CVE-2024-38312. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
GHSA
GHSA-ffh4-92gv-qvv5: When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle
ghsa_unreviewed·2024-06-13
CVE-2024-38312 [MEDIUM] CWE-922 GHSA-ffh4-92gv-qvv5: When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-13
Published