A vulnerability in Firefox and Thunderbird allowed a clipboard "paste" button to persist across browser tabs, enabling a spoofing attack. This issue affected Firefox versions prior to 132, Firefox ESR versions prior to 128.4, and corresponding Thunderbird versions. The flaw was addressed in Firefox 132 and Firefox ESR 128.4 releases.