p PatchFirst

CVE-2024-6608

CVE-2024-6608 · Cursor could be moved out of the viewport using pointerlock.

This page contains facts from public vulnerability sources. Check the original advisory before updating.

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS 4.3 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • firefox

    Versions
    • ≥ unspecified, < 128: Affected (custom)

    Update to 128

  • thunderbird

    Versions
    • ≥ unspecified, < 128: Affected (custom)

    Update to 128

  • mozjs52 Ubuntu:18.04:LTS

    Versions
    • 52.3.1-0ubuntu3
    • 52.3.1-7fakesync1
    • 52.8.1-0ubuntu0.18.04.1
    • 52.9.1-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs38 Ubuntu:18.04:LTS

    Versions
    • 38.8.0~repack1-0ubuntu1
    • 38.8.0~repack1-0ubuntu3
    • 38.8.0~repack1-0ubuntu4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • firefox Ubuntu:20.04:LTS

    Versions
    • 69.0.3+build1-0ubuntu1
    • 70.0+build2-0ubuntu1
    • 70.0+build2-0ubuntu2
    • 70.0.1+build1-0ubuntu2
    • 71.0+build2-0ubuntu2
    • 71.0+build5-0ubuntu1
    • 72.0.1+build1-0ubuntu1
    • 72.0.2+build1-0ubuntu1
    • 73.0+build1-0ubuntu1
    • 73.0+build2-0ubuntu1
    • 73.0+build3-0ubuntu1
    • 73.0.1+build1-0ubuntu1
    • 74.0+build1-0ubuntu1
    • 74.0+build2-0ubuntu1
    • 74.0+build2-0ubuntu2
    • 74.0+build3-0ubuntu1
    • 75.0+build3-0ubuntu1
    • 76.0+build2-0ubuntu0.20.04.1
    • 76.0.1+build1-0ubuntu0.20.04.1
    • 77.0.1+build1-0ubuntu0.20.04.1
    • 78.0.1+build1-0ubuntu0.20.04.1
    • 78.0.2+build2-0ubuntu0.20.04.1
    • 79.0+build1-0ubuntu0.20.04.1
    • 80.0+build2-0ubuntu0.20.04.1
    • 80.0.1+build1-0ubuntu0.20.04.1
    • 81.0+build2-0ubuntu0.20.04.1
    • 81.0.2+build1-0ubuntu0.20.04.1
    • 82.0+build2-0ubuntu0.20.04.1
    • 82.0.2+build1-0ubuntu0.20.04.1
    • 82.0.3+build1-0ubuntu0.20.04.1
    • 83.0+build2-0ubuntu0.20.04.1
    • 84.0+build3-0ubuntu0.20.04.1
    • 84.0.1+build1-0ubuntu0.20.04.1
    • 84.0.2+build1-0ubuntu0.20.04.1
    • 85.0+build1-0ubuntu0.20.04.1
    • 85.0.1+build1-0ubuntu0.20.04.1
    • 86.0+build3-0ubuntu0.20.04.1
    • 86.0.1+build1-0ubuntu0.20.04.1
    • 87.0+build3-0ubuntu0.20.04.2
    • 88.0+build2-0ubuntu0.20.04.1
    • 88.0.1+build1-0ubuntu0.20.04.2
    • 89.0+build2-0ubuntu0.20.04.2
    • 89.0.1+build1-0ubuntu0.20.04.1
    • 89.0.2+build1-0ubuntu0.20.04.1
    • 90.0+build1-0ubuntu0.20.04.1
    • 90.0.2+build1-0ubuntu0.20.04.1
    • 91.0+build2-0ubuntu0.20.04.1
    • 91.0.1+build1-0ubuntu0.20.04.1
    • 91.0.2+build1-0ubuntu0.20.04.1
    • 92.0+build3-0ubuntu0.20.04.1
    • 93.0+build1-0ubuntu0.20.04.1
    • 94.0+build3-0ubuntu0.20.04.1
    • 95.0+build1-0ubuntu0.20.04.1
    • 95.0.1+build2-0ubuntu0.20.04.1
    • 96.0+build2-0ubuntu0.20.04.1
    • 97.0+build2-0ubuntu0.20.04.1
    • 97.0.2+build1-0ubuntu0.20.04.1
    • 98.0+build3-0ubuntu0.20.04.2
    • 98.0.1+build2-0ubuntu0.20.04.1
    • 98.0.2+build1-0ubuntu0.20.04.1
    • 99.0+build2-0ubuntu0.20.04.2
    • 100.0+build2-0ubuntu0.20.04.1
    • 100.0.2+build1-0ubuntu0.20.04.1
    • 101.0.1+build1-0ubuntu0.20.04.1
    • 102.0+build2-0ubuntu0.20.04.1
    • 103.0+build1-0ubuntu0.20.04.1
    • 104.0+build3-0ubuntu0.20.04.1
    • 105.0+build2-0ubuntu0.20.04.1
    • 106.0.2+build1-0ubuntu0.20.04.1
    • 106.0.5+build1-0ubuntu0.20.04.1
    • 107.0+build2-0ubuntu0.20.04.1
    • 108.0+build2-0ubuntu0.20.04.1
    • 108.0.1+build1-0ubuntu0.20.04.1
    • 108.0.2+build1-0ubuntu0.20.04.1
    • 109.0+build2-0ubuntu0.20.04.1
    • 109.0.1+build1-0ubuntu0.20.04.2
    • 110.0+build3-0ubuntu0.20.04.1
    • 110.0.1+build2-0ubuntu0.20.04.1
    • 111.0+build2-0ubuntu0.20.04.1
    • 111.0.1+build2-0ubuntu0.20.04.1
    • 112.0+build2-0ubuntu0.20.04.1
    • 112.0.1+build1-0ubuntu0.20.04.1
    • 112.0.2+build1-0ubuntu0.20.04.1
    • 113.0+build2-0ubuntu0.20.04.1
    • 113.0.1+build1-0ubuntu0.20.04.1
    • 113.0.2+build1-0ubuntu0.20.04.1
    • 114.0+build3-0ubuntu0.20.04.1
    • 114.0.1+build1-0ubuntu0.20.04.1
    • 114.0.2+build1-0ubuntu0.20.04.1
    • 115.0+build2-0ubuntu0.20.04.3
    • 115.0.2+build1-0ubuntu0.20.04.1
    • 116.0+build2-0ubuntu0.20.04.2
    • 116.0.2+build1-0ubuntu0.20.04.1
    • 116.0.3+build2-0ubuntu0.20.04.1
    • 117.0+build2-0ubuntu0.20.04.1
    • 117.0.1+build2-0ubuntu0.20.04.1
    • 118.0.1+build1-0ubuntu0.20.04.1
    • 118.0.2+build2-0ubuntu0.20.04.1
    • 119.0+build2-0ubuntu0.20.04.1
    • 119.0.1+build1-0ubuntu0.20.04.1
    • 120.0+build2-0ubuntu0.20.04.1
    • 120.0.1+build1-0ubuntu0.20.04.1
    • 121.0+build1-0ubuntu0.20.04.1
    • 121.0.1+build1-0ubuntu0.20.04.1
    • 122.0+build2-0ubuntu0.20.04.1
    • 122.0.1+build1-0ubuntu0.20.04.1
    • 123.0+build3-0ubuntu0.20.04.1
    • 123.0.1+build1-0ubuntu0.20.04.1
    • 124.0+build1-0ubuntu0.20.04.1
    • 124.0.1+build1-0ubuntu0.20.04.1
    • 124.0.2+build1-0ubuntu0.20.04.1
    • 125.0.2+build1-0ubuntu0.20.04.2
    • 125.0.3+build1-0ubuntu0.20.04.1
    • 126.0+build2-0ubuntu0.20.04.1
    • 126.0.1+build1-0ubuntu0.20.04.1
    • 127.0.2+build1-0ubuntu0.20.04.1
    Affected ranges
    • ECOSYSTEM: < 128.0+build2-0ubuntu0.20.04.1

    Update to 128.0+build2-0ubuntu0.20.04.1

  • mozjs68 Ubuntu:20.04:LTS

    Versions
    • 68.5.0-1~fakesync
    • 68.5.0-2~fakesync
    • 68.6.0-1
    • 68.6.0-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs52 Ubuntu:20.04:LTS

    Versions
    • 52.9.1-1build1
    • 52.9.1-1ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs102 Ubuntu:22.04:LTS

    Versions
    • 102.11.0-0ubuntu0.22.04.1
    • 102.12.0-0ubuntu0.22.04.1
    • 102.13.0-0ubuntu0.22.04.1
    • 102.15.1-0ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs78 Ubuntu:22.04:LTS

    Versions
    • 78.13.0-1
    • 78.15.0-2
    • 78.15.0-4ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs91 Ubuntu:22.04:LTS

    Versions
    • 91.5.1-0ubuntu1
    • 91.6.0-1
    • 91.6.0-2
    • 91.7.0-2
    • 91.10.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs102 Ubuntu:24.04:LTS

    Versions
    • 102.15.1-1
    • 102.15.1-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →