CVE-2024-4768

Publication date

2024-05-14 17:21:24

Family

mozilla

State

PUBLISHED

Description

A bug in popup notifications interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.