CVE-2024-31392: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status This vulnerability affects Firefox for iOS < 124.

Affected products

• Mozilla Firefox: before 124.0 (fixed in 124.0)

Published 2024-04-03. Last modified 2026-06-17.