CVE-2024-10004

State: Published
Severity: 9.1 Critical
Published: Oct 15, 2024
Updated: Oct 16, 2024
Reserved: Oct 15, 2024

Description

Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	CISA-ADP

Weaknesses

CWE-1021 Improper Restriction of Rendered UI Layers or Frames

Affected Products

Product	Versions
Firefox for iOSMozilla	before 131.2Affected

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1904885
https://www.mozilla.org/security/advisories/mfsa2024-54/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.