CVE-2024-6608

MEDIUM

Firefox < 128 - Cursor Position Manipulation via Pointer Lock in Iframe

Title source: llm
STIX 2.1

Description

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References (3)

Core 3

Scores

CVSS v3 4.3
EPSS 0.0012
EPSS Percentile 30.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (2)
mozilla/firefox < 128.0
mozilla/thunderbird < 128.0
Published Jul 09, 2024
Tracked Since Feb 18, 2026