VDB
DEBIAN-CVE-2024-8382
DEBIAN-CVE-2024-8382
PUBLISHED
CVSS 8.800000190734863 HIGH
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | thunderbird | 0, 0 |
| Debian:12 | thunderbird | 115.8.1-1, 115.9.0-1, 115.9.0-1 |
| Debian:11 | firefox-esr | *, *, * |
| Debian:11 | thunderbird | 91.6.0-1, 0, 1:102.0.1-1 |
| Debian:14 | thunderbird | 0, 0 |
| Debian:12 | firefox-esr | *, 115.9.1, 115.9.1 |
| Debian:13 | firefox-esr | 0, 0 |
| Debian:14 | firefox-esr | 0, 0 |
Timeline
- Sep 3, 2024 CVE Published
- Apr 28, 2026 CVE Updated