Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2024-6601

Race condition in permission assignment

Description

A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • unspecified to < 128affected

Mozilla Firefox ESR

  • unspecified to < 115.13affected

Mozilla Thunderbird

  • unspecified to < 115.13affected

Mozilla Thunderbird

  • unspecified to < 128affected

References