Skip to main content

Threats Tagged 'cve-2024-11696'

View all threats tagged with 'cve-2024-11696'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2024-11696

Threats Tagged 'cve-2024-11696'

Click on any threat for detailed analysis and mitigation recommendations

0

This is a security update for Thunderbird provided by the SUSE Product Security Team, addressing multiple vulnerabilities including CVE-2024-11159 and several related CVEs. The update corresponds functionally to the Red Hat advisory RHSA-2024:10592. No specific affected versions or detailed technical information are provided in the input data.

Join the discussion
0

Multiple security vulnerabilities affecting Firefox and Thunderbird have been addressed in a security update included in Red Hat Enterprise Linux 10. These include CSP bypass and XSS exposure, unhandled exceptions in add-on signature verification, UI element display issues, memory safety bugs, URL bar spoofing, and improper keypress handling. The update also includes fixes for qemu-kvm components used for virtualization on Linux. The vulnerabilities are rated with high severity and have been fixed in recent package releases.

Join the discussion

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

Join the discussion

Showing 1 to 3 of 3 results

Filters:Tag: cve-2024-11696
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses