CVE-2024-6608
Medium
Published: 09 July 2024
Published
09 July 2024
Modified
25 March 2025
KEV Added
—
Patch
—
CVSS Score v3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS Score
0.0012
30.7th percentile
Risk Priority
9
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2024-6608 is a medium-severity an unspecified weakness vulnerability in Mozilla Firefox. Its CVSS base score is 4.3 (Medium).
Operationally, ranked at the 30.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-47670
Vulnerability details
It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
mozilla
firefox
≤ 128.0
mozilla
thunderbird
≤ 128.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.