PT-2024-9962 · Mozilla+2 · Thunderbird+3
Umar Farooq
·
Published
2024-11-26
·
Updated
2025-11-19
·
CVE-2024-11702
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Mozilla Firefox versions prior to 133
Thunderbird versions prior to 133
Description:
The issue is related to the Private Browsing Mode in Mozilla Firefox and Thunderbird on Android operating systems. It involves the potential for sensitive information, such as passwords, to be inadvertently stored in the cloud-based clipboard history if this feature is enabled. This could allow a remote attacker to gain unauthorized access to protected information.
Recommendations:
For Mozilla Firefox versions prior to 133, update to version 133 or later to resolve the issue.
For Thunderbird versions prior to 133, update to version 133 or later to resolve the issue.
As a temporary workaround, consider disabling the cloud-based clipboard history feature until a patch is available.
Restrict access to sensitive information in Private Browsing tabs to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Android
Firefox
Thunderbird