CVE-2024-2609
Debian
CVE-2024-2609 is a clickjacking vulnerability affecting Firefox, Firefox ESR, and Thunderbird. This flaw allows malicious websites to potentially hijack user clicks due to a permission prompt input delay. The vulnerability exists because the permission prompt's input delay can expire when the window is not in focus. With a SOCRadar Vulnerability Risk Score (SVRS) of 30, this vulnerability is not considered critical; however, it should still be addressed in a timely manner. Although the CVSS score is 6.1, the lower SVRS indicates limited real-world exploitability based on SOCRadar's vulnerability intelligence. Update to the latest versions of Firefox, Firefox ESR, and Thunderbird to mitigate the security risk. While not immediately critical, patching remains important to prevent potential exploitation and maintain a strong security posture.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.