Vulnerability · Mozilla Firefox
CVE-2024-3863
The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
CVSS score (v3.1)9.8Critical
Fixed in 115.10.0
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- Published by NVD
- Last updated by NVD
Affected products
| Product | Versions |
|---|---|
| Mozilla Firefox | up to before 115.10.0; up to before 125.0 |
| Mozilla Thunderbird | up to before 115.10 |
Sources: NVD and CISA known exploited vulnerabilities catalogue.