https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:00:29.732496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-11694 CVE-2024-11694 2026-10-08T09:00:29.754598+00:00

Affected: Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird

Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.