VDB

GCVE-110-MAGEIA-2024-24

GCVE-110-MAGEIA-2024-24
Advisory Published
Vulnetix · Advisory published February 4, 2024
Out of bounds write in ANGLE. (CVE-2024-0741) Failure to update user input timestamp. (CVE-2024-0742) Crash when listing printers on Linux. (CVE-2024-0746) Bypass of Content Security Policy when directive unsafe-inline was set. (CVE-2024-0747) Phishing site popup could show local origin in address bar. (CVE-2024-0749) Potential permissions request bypass via clickjacking. (CVE-2024-0750) Privilege escalation through devtools. (CVE-2024-0751) HSTS policy on subdomain could bypass policy of upper domain. (CVE-2024-0753) Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. (CVE-2024-0755)

Affected Products

VendorProductVersionsPlatforms
Mageiaopencpn-o-charts-plugin2.0.1.9-2.mga9.nonfree (unaffected), 0 (affected)—
Mageiathunderbird0 (affected), 0 (affected), 115.7.0-1.mga9 (unaffected), 115.7.0-1.mga9 (unaffected)—
Mageiathunderbird-l10n0 (affected), 0 (affected), 115.7.0-1.mga9 (unaffected), 115.7.0-1.mga9 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›