DEBIAN-CVE-2024-8900

DEBIAN-CVE-2024-8900 PUBLISHED CVSS 7.5 HIGH

An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox < 129, Firefox ESR < 128.3, and Thunderbird < 128.3.

Risk Scores

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:14	thunderbird	0, 0
Debian:13	thunderbird	0, 0

Timeline

Sep 17, 2024 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2024-8900 advisory

Open in Interactive Console →