CVE-2024-11698

CRITICAL

Mozilla Firefox and Thunderbird - Fullscreen Mode Lock on macOS

Title source: llm
STIX 2.1

Description

A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click menus, resulting in a disrupted browsing experience until the browser is restarted. *This bug only affects the application when running on macOS. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

Scores

CVSS v3 9.8
EPSS 0.0024
EPSS Percentile 47.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

Status published
Products (3)
mozilla/firefox < 128.5.0
mozilla/firefox < 133.0
mozilla/thunderbird < 128.5.0
Published Nov 26, 2024
Tracked Since Feb 18, 2026