Firefox Vulnerability: Permission Leak Due to Embed or Object Elements

CVE-2024-10458

What is CVE-2024-10458?

A vulnerability exists in Mozilla products that may allow a permission leak from a trusted site to an untrusted site when using embed or object HTML elements. This flaw affects several versions of Firefox and Thunderbird, potentially exposing sensitive user permissions to malicious external content. Users of affected versions are encouraged to review security advisories and apply necessary updates to mitigate the risks associated with this vulnerability.

References