Mozilla Firefox Vulnerability Allows Tapjacking
CVE-2024-6605

8.8HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Vendor
CVE Published:
9 July 2024

What is CVE-2024-6605?

A vulnerability in Firefox for Android allows attackers to manipulate permission prompts, potentially enabling tapjacking attacks. This issue arises when user interactions with permission dialogs can be intercepted immediately, leading to unauthorized actions by concealing the legitimate interface. Users of Firefox versions prior to 128 are at risk and should apply the necessary updates to maintain their device security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Firefox < 128

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1836786
https://www.mozilla.org/security/advisories/mfsa2024-29/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.