Beveiligingsadvies

CVE-2024-0605

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-22 18:23:24

Laatst bijgewerkt 2025-06-20 18:39:12

Toegewezen door mozilla

CVSS-score 7.5

Status PUBLISHED

Beschrijving

Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.

← Alle CVE's bekijken Bekijk op cve.org ↗