CVE-2024-11702

Summary

CVE-2024-11702 is a vulnerability affecting Firefox version 132 and earlier, as well as Thunderbird version 132 and below for Android. In Private Browsing mode, this issue allows for the inadvertent storage of sensitive information, such as passwords, in cloud-based clipboard history if the feature is enabled. The vulnerability arises due to a misconfiguration, enabling copied data from Private Browsing sessions to be synced across devices and stored in the cloud. This could potentially lead to unintended disclosure of private information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.