CVE-2024-10458 is a high-severity vulnerability in Mozilla Firefox and Thunderbird where a permission leak could occur from a trusted site to an untrusted site via embed or object elements. This flaw affects Firefox versions prior to 132, Firefox ESR versions prior to 128.4 and 115.17, and Thunderbird versions prior to 128.4 and 132. The issue was addressed in Firefox 132 and Firefox ESR 128.4 releases.