CVE-2024-6605

HIGH Year: 2024
CVSS v3 Score
8.8
High
Weakness Type
CWE-277
View all →

Vulnerability Description

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox < 128.

Related Vulnerabilities

CVE-2023-27842

HIGH
CVSS:8.8(High)

Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent

CWE-2772023

CVE-2024-36542

HIGH
CVSS:8.8(High)

Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CWE-2772024

CVE-2024-29417

HIGH
CVSS:8.4(High)

Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password reset function.

CWE-2772024

CVE-2024-34329

HIGH
CVSS:8.4(High)

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted...

CWE-2772024

CVE-2024-27834

HIGH
CVSS:8.1(High)

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker with arbitrary read and write capabi...

CWE-2772024

CVE-2024-36539

CRITICAL
CVSS:9.8(Critical)

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CWE-2772024