CVE-2024-3863
CRITICAL
INFO
Priority: 0.08
BB Relevance:
80/100
Published: 2024-04-16
Modified: 2026-11-04
First seen: 2026-11-03
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
Weakness Classification (1)
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| Mozilla | Firefox | unspecified < 125 |
| Mozilla | Firefox | unspecified < 125 |
| Mozilla | Firefox ESR | unspecified < 115.10 |
| Mozilla | Firefox ESR | unspecified < 115.10 |
| Mozilla | Thunderbird | unspecified < 115.10 |
| Mozilla | Thunderbird | unspecified < 115.10 |
| mozilla | firefox | < 115.10.0 |
| mozilla | firefox | < 125.0 |
| mozilla | thunderbird | < 115.10 |