CVE-2024-6608 (MEDIUM)

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 128.0-1 (sid)	firefox 128.0-1 (sid)
mozilla	firefox	< 128.0	128.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 128.0+build2-0ubuntu0.20.04.1	128.0+build2-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 128	128
mozilla	thunderbird	< 128.0	128.0
mozilla	thunderbird	>= unspecified < 128	128
msrc	azl3_mozjs_102.15.1-1_on_azure_linux_3.0	—	—

OSV

firefox vulnerabilities

osv·2024-07-10·CVSS 4.7

CVE-2024-6601 [MEDIUM] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-6601, CVE-2024-6604, CVE-2024-6607, CVE-2024-6608, CVE-2024-6610, CVE-2024-6611, CVE-2024-6612, CVE-2024-6613, CVE-2024-6614, CVE-2024-6615) It was discovered that Firefox did not properly manage certain memory operations in the NSS. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-6602, CVE-2024-6609) Irvan Kurniawan discovered that Firefox did not properly manage memory during thread creation. An attacker could potentially exp

OSV

CVE-2024-6608: It was possible to move the cursor using pointerlock from an iframe

osv·2024-07-10·CVSS 4.3

CVE-2024-6608 [MEDIUM] CVE-2024-6608: It was possible to move the cursor using pointerlock from an iframe It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

GHSA

GHSA-vr96-9xq4-q4jp: It was possible to move the cursor using pointerlock from an iframe

ghsa_unreviewed·2024-07-09

CVE-2024-6608 [MEDIUM] GHSA-vr96-9xq4-q4jp: It was possible to move the cursor using pointerlock from an iframe It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128.

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2024-07-10·CVSS 4.7

CVE-2024-6612 [MEDIUM] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-6601, CVE-2024-6604, CVE-2024-6607, CVE-2024-6608, CVE-2024-6610, CVE-2024-6611, CVE-2024-6612, CVE-2024-6613, CVE-2024-6614, CVE-2024-6615) It was discovered that Firefox did not properly manage certain memory operations in the NSS. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-6602, CVE-2024-6609) Irvan Kurniawan discovered that Firefox did not properly manage

Microsoft

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunder

vendor_msrc·2024-07-09·CVSS 4.3

CVE-2024-6608 [MEDIUM] It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunder It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this. M

Debian

CVE-2024-6608: firefox - It was possible to move the cursor using pointerlock from an iframe. This allowe...

vendor_debian·2024·CVSS 4.3

CVE-2024-6608 [MEDIUM] CVE-2024-6608: firefox - It was possible to move the cursor using pointerlock from an iframe. This allowe... It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128. Scope: local sid: resolved (fixed in 128.0-1)

Mozilla

Mozilla Foundation Security Advisory 2024-29: CVE-2024-6608

vendor_mozilla·CVSS 4.3

CVE-2024-6608 [MEDIUM] Mozilla Foundation Security Advisory 2024-29: CVE-2024-6608 Mozilla Foundation Security Advisory 2024-29 CVE: CVE-2024-6608 Product: Firefox Impact: high Fixed in: Firefox 128

Mozilla

Mozilla Foundation Security Advisory 2024-32: CVE-2024-6608

vendor_mozilla·CVSS 4.3

CVE-2024-6608 [MEDIUM] Mozilla Foundation Security Advisory 2024-32: CVE-2024-6608 Mozilla Foundation Security Advisory 2024-32 CVE: CVE-2024-6608 Product: Thunderbird Impact: high Fixed in: Thunderbird 128

CVE-2024-6608: It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This…

Affected

CVSS provenance