CVE-2024-9392 is a critical vulnerability in Firefox and Thunderbird where a compromised content process could allow arbitrary loading of cross-origin pages. This flaw affects Firefox versions prior to 131, Firefox ESR versions prior to 128.3 and 115.16, and Thunderbird versions prior to 128.3 and 131. The vulnerability could enable an attacker to bypass site isolation protections, potentially leading to high impact including confidentiality, integrity, and availability compromises. Mozilla has released official fixes in Firefox 131, Firefox ESR 128.3, and Thunderbird 131 to address this issue.