cve/2024/CVE-2024-6607.md
2025-09-29 21:09:30 +02:00

1.1 KiB

CVE-2024-6607

Description

It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a &lt;select&gt; element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.

POC

Reference

Github