CVE-2024-26283: High severity Mozilla Firefox vulnerability
Published Feb 19, 2024
·Updated
An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme.
Affected Software
3 affected components
All of the following
Mozilla Firefox=123
Apple iOS
Mozilla Firefox Iphone Os<123.0
Event History
Feb 19, 2024
CVE Published
via Mozilla·12:00 AM
Feb 22, 2024
CVE Published
via MITRE·02:56 PM
Data Sourced
via MITRE·02:56 PM
DescriptionWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2024-26283?
CVE-2024-26283 has been classified as a critical severity vulnerability.
2
How do I fix CVE-2024-26283?
To fix CVE-2024-26283, update your Mozilla Firefox browser to version 124 or later.
3
What platforms are affected by CVE-2024-26283?
CVE-2024-26283 affects Mozilla Firefox version 123 and Apple iOS.
4
What does CVE-2024-26283 exploit?
CVE-2024-26283 exploits the ability to execute unauthorized scripts using a JavaScript URI.
5
Can CVE-2024-26283 affect websites?
Yes, CVE-2024-26283 can affect top origin sites by allowing unauthorized script execution.