CVE-2024-3863 — Vulnerability intelligence

mozilla — firefox

Published: 2024-04-16T15:14:08.950Z

CVSS

9.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

Sources

• CVE-2024-3863
• Issue Tracking
• Vendor Advisory
• Vendor Advisory
• Vendor Advisory
• CVE-2024-3863