VDB
GCVE-110-MAGEIA-2024-23
GCVE-110-MAGEIA-2024-23
Advisory Published
Out of bounds write in ANGLE. (CVE-2024-0741)
Failure to update user input timestamp. (CVE-2024-0742)
Crash when listing printers on Linux. (CVE-2024-0746)
Bypass of Content Security Policy when directive unsafe-inline was set.
(CVE-2024-0747)
Phishing site popup could show local origin in address bar.
(CVE-2024-0749)
Potential permissions request bypass via clickjacking. (CVE-2024-0750)
Privilege escalation through devtools. (CVE-2024-0751)
HSTS policy on subdomain could bypass policy of upper domain.
(CVE-2024-0753)
Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and
Thunderbird 115.7. (CVE-2024-0755)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | firefox | 0 (affected), 115.7.0-1.mga9 (unaffected), 0 (affected), 115.7.0-1.mga9 (unaffected) | — |
| Mageia | firefox-l10n | 0 (affected), 115.7.0-1.mga9 (unaffected), 0 (affected), 115.7.0-1.mga9 (unaffected) | — |
| Mageia | nss | 0 (affected), 3.97.0-1.mga9 (unaffected), 0 (affected), 3.97.0-1.mga9 (unaffected) | — |
| Mageia | opencpn-weather-routing-plugin | 0 (affected), 1.15.18.0-1.mga9 (unaffected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.