CVE-2024-10458

Published: Oct 29, 2024

Modified: Nov 3, 2025

PUBLISHED

Description

A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.

Vendor	Product	Versions
Mozilla	Firefox	affected `unspecified - < 132`
Mozilla	Firefox ESR	affected `unspecified - < 128.4`
Mozilla	Firefox ESR	affected `unspecified - < 115.17`
Mozilla	Thunderbird	affected `unspecified - < 128.4`
Mozilla	Thunderbird	affected `unspecified - < 132`