Firefox Vulnerability Allows Malicious Code Execution Through Manipulation of Keypress Events

CVE-2024-11697

What is CVE-2024-11697?

A vulnerability exists that could permit an attacker to manipulate keypress events, enabling them to deceive the user into bypassing the 'Open Executable File?' confirmation dialog. This flaw raises concerns regarding the execution of potentially harmful code within the Firefox and Thunderbird applications, affecting several versions and highlighting the need for immediate action to mitigate risks.

References