Threats tagged 'ghsa-728v-c7pv-wm7x'

A same-origin policy bypass vulnerability exists in the Graphics: Canvas2D component of Firefox and Thunderbird. This flaw affects Firefox versions prior to 142 and Firefox ESR versions prior to 115.27, 128.14, and 140.2, as well as Thunderbird versions prior to 142, 128.14, and 140.2. The vulnerability allows bypassing the same-origin policy, which is a critical security control in web browsers. Mozilla has fixed this issue in Firefox 142 and Firefox ESR 115.27. The vulnerability has a high severity rating with a CVSS score of 8.1.