CVE-2024-7518: Medium severity Mozilla Thunderbird vulnerability
Last updated 21 August 2024
Other sources
Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 131.0.2-2 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 128.1 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 128.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 129
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-7518?
CVE-2024-7518 has been classified as a medium severity vulnerability due to its potential for spoofing attacks.
How do I fix CVE-2024-7518?
To fix CVE-2024-7518, update your Mozilla Firefox or Thunderbird to version 129 or later.
What products are affected by CVE-2024-7518?
CVE-2024-7518 affects Mozilla Firefox ESR versions prior to 129 and Thunderbird versions prior to 129.
Can CVE-2024-7518 lead to a security breach?
Yes, CVE-2024-7518 can potentially be exploited to perform spoofing attacks, leading to security breaches.
Is CVE-2024-7518 a local or remote vulnerability?
CVE-2024-7518 is considered a remote vulnerability since it can be exploited by malicious sites.