{"id":"CVE-2024-0742","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-0742","generatedAt":"2026-10-27T23:57:35.643Z","title":"This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.","description":"It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.","published":"2024-01-23T14:15:38.000Z","lastModified":"2026-06-17T06:54:09.000Z","status":"Modified","sourceIdentifier":"security@mozilla.org","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},"cwe":[],"affected":["mozilla/firefox","mozilla/firefox esr","mozilla/thunderbird","debian/debian linux"],"epss":{"score":0.00596,"percentile":0.48192,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1867152","tags":["Issue Tracking","Permissions Required"],"source":"security@mozilla.org"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html","tags":["Mailing List","Third Party Advisory"],"source":"security@mozilla.org"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html","tags":["Mailing List","Third Party Advisory"],"source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-01/","tags":["Vendor Advisory"],"source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-02/","tags":["Vendor Advisory"],"source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-04/","tags":["Vendor Advisory"],"source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1867152","tags":["Issue Tracking","Permissions Required"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-01/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-02/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-04/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-0742","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}