cve.bz

CVE-2024-4767

4.3 mediumEPSS 0.5%

Medium (4.3). EPSS 0.5% chance of exploitation in the next 30 days.

If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Severity

CVSS 3.1

4.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWEs
CWE-459, CWE-359
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON