CVE-2024-1550 Information

Description

A malicious website could have used a combination of exiting fullscreen mode and requestPointerLock to cause the user’s mouse to be re-positioned unexpectedly which could have led to user confusion and inadvertently granting permissions they did not intend to grant. This vulnerability affects Firefox < 123 Firefox ESR < 115.8 and Thunderbird < 115.8.

Reference

https://bugzilla.mozilla.org/show_bug.cgi?id=1860065 https://www.mozilla.org/security/advisories/mfsa2024-05/ https://www.mozilla.org/security/advisories/mfsa2024-06/ https://www.mozilla.org/security/advisories/mfsa2024-07/