CVE-2024-0750: Debian Linux

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Affected products

• Debian Debian Linux: version 10.0 only
• Mozilla Firefox: before 122.0 (fixed in 122.0)
• Mozilla Firefox ESR: before 115.7 (fixed in 115.7)
• Mozilla Thunderbird: up to and including 115.7

Published 2024-01-23. Last modified 2026-06-17.