Lucene search

K
nvd[email protected]NVD:CVE-2024-4768
HistoryMay 14, 2024 - 6:15 p.m.

CVE-2024-4768

2024-05-1418:15:14
web.nvd.nist.gov
7
vulnerability
popup notifications
webauthn
attacker
user
permissions
firefox
thunderbird

AI Score

5.3

Confidence

Low

EPSS

0

Percentile

10.3%

A bug in popup notifications’ interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.