medium4.3
CVE-2024-6608
It was possible to move the cursor using pointerlock from an iframe.
Impact
It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 128.0 |
| Mozilla | Thunderbird | before 128.0 |