CVE-2024-0605: Race Condition
Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions within the user's loaded webpage.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0605?
CVE-2024-0605 is considered a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2024-0605?
To mitigate CVE-2024-0605, ensure you are using the latest version of affected browsers, specifically updates beyond version 122 for Mozilla Focus and Firefox.
What types of attacks are possible with CVE-2024-0605?
CVE-2024-0605 allows attackers to execute unauthorized scripts and perform actions within a user's loaded webpage.
Which software is affected by CVE-2024-0605?
CVE-2024-0605 affects Mozilla Focus version 122 and earlier, as well as specific versions of Firefox on Apple iOS.
How does CVE-2024-0605 exploit the browser?
CVE-2024-0605 exploits a race condition in handling javascript: URIs, bypassing security measures to execute unauthorized scripts.