CVE-2024-9398
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Oct 1, 2024
Updated: Mar 18, 2025
CWE ID 203
Summary
CVE-2024-9398 is a vulnerability affecting Firefox versions below 131, Firefox ESR below 128.3, Thunderbird versions below 128.3, and Thunderbird versions below 131. An attacker can exploit this issue by checking the result of calls to `window.open` with specifically crafted protocol handlers. By doing so, the attacker can determine if the application handling that protocol is installed within the targeted browser, posing a potential privacy risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.