← Database

CVE-2024-4768

MEDIUM CVSS: 6.1 Published: 2024-05-14 Modified: 2026-06-17

Description

A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Affected Platforms

Mozilla FirefoxDebian Debian LinuxMozilla Thunderbird

Weakness Type

CWE-281

References