VDB

GCVE-VVD-MAGEIA-2024-189

GCVE-VVD-MAGEIA-2024-189
Advisory Published
Vulnetix · Advisory published August 31, 2024
Arbitrary JavaScript execution in PDF.js. (CVE-2024-4367) IndexedDB files retained in private browsing mode. (CVE-2024-4767) Potential permissions request bypass via clickjacking. (CVE-2024-4768) Cross-origin responses could be distinguished between script and non-script content-types. (CVE-2024-4769) Use-after-free could occur when printing to PDF. (CVE-2024-4770) Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. (CVE-2024-4777)

Affected Products

VendorProductVersionsPlatforms
Mageiafirefox0 (affected), 115.11.0-1.mga9 (unaffected), 0 (affected), 115.11.0-1.mga9 (unaffected)
Mageiafirefox-l10n0 (affected), 115.11.0-1.mga9 (unaffected), 0 (affected), 115.11.0-1.mga9 (unaffected)
Mageianss0 (affected), 3.100.0-1.mga9 (unaffected), 0 (affected), 3.100.0-1.mga9 (unaffected)
Mageiakodi0 (affected), 20.4-1.1.mga9 (unaffected), 0 (affected), 20.4-1.1.mga9.tainted (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›