High severity8.1NVD Advisory· Published Nov 26, 2024· Updated Jun 17, 2026
CVE-2024-11700
CVE-2024-11700
Description
Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22- osv-coords16 versionspkg:apk/wolfi/firefoxpkg:deb/ubuntu/[email protected]?arch=source&distro=esm-infra/bionicpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:apk/chainguard/firefoxpkg:deb/ubuntu/[email protected]?arch=source&distro=focalpkg:deb/ubuntu/thunderbird@1:115.18.0+build1-0ubuntu0.20.04.1?arch=source&distro=focalpkg:deb/ubuntu/[email protected]?arch=source&distro=jammypkg:deb/ubuntu/[email protected]?arch=source&distro=jammypkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:deb/ubuntu/[email protected]?arch=source&distro=noblepkg:deb/ubuntu/[email protected]?arch=source&distro=noblepkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:deb/ubuntu/[email protected]~repack1-0ubuntu4?arch=source&distro=esm-apps/bionicpkg:deb/ubuntu/thunderbird@1:115.18.0+build1-0ubuntu0.22.04.1?arch=source&distro=jammypkg:deb/ubuntu/[email protected]?arch=source&distro=focalpkg:deb/ubuntu/[email protected]?arch=source&distro=jammy
< 133.0-r0+ 15 more
- (no CPE)range: < 133.0-r0
- (no CPE)range: >= 0
- (no CPE)range: < 133.0.3-1.1
- (no CPE)range: < 133.0-r0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: < 153.0-1.1
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
unspecified+ 2 more
- (no CPE)range: unspecified
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <133.0
- (no CPE)range: <133
unspecified+ 2 more
- (no CPE)range: unspecified
- cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*range: <133.0
- (no CPE)range: <133
Patches
Vulnerability mechanics
References
3- www.mozilla.org/security/advisories/mfsa2024-63/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2024-67/nvdVendor Advisory
- bugzilla.mozilla.org/show_bug.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.