Search for vulnerabilities
Vulnerability details: VCID-2mb7-j9nk-q7c5
Vulnerability ID VCID-2mb7-j9nk-q7c5
Aliases CVE-2024-10463
Summary Video frames could have been leaked between origins in some situations.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-942 Permissive Cross-domain Policy with Untrusted Domains
CWE-203 Observable Discrepancy
System Score Found at
cvssv3 5.4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-10463.json
cvssv3 6.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-10463.json
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00068 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00093 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00093 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00093 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00093 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00093 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00093 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00104 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00139 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00139 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00139 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00139 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00139 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00139 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00139 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00139 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00182 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00182 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00182 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00182 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00182 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00182 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00182 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-10463
cvssv3.1 7.5 https://bugzilla.mozilla.org/show_bug.cgi?id=1920800
ssvc Track https://bugzilla.mozilla.org/show_bug.cgi?id=1920800
cvssv3.1 3.7 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 6.5 https://nvd.nist.gov/vuln/detail/CVE-2024-10463
cvssv3.1 6.5 https://nvd.nist.gov/vuln/detail/CVE-2024-10463
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2024-55
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2024-56
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2024-57
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2024-58
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2024-59
cvssv3.1 6.5 https://www.mozilla.org/security/advisories/mfsa2024-55/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2024-55/
cvssv3.1 6.5 https://www.mozilla.org/security/advisories/mfsa2024-56/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2024-56/
cvssv3.1 6.5 https://www.mozilla.org/security/advisories/mfsa2024-57/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2024-57/
cvssv3.1 6.5 https://www.mozilla.org/security/advisories/mfsa2024-58/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2024-58/
cvssv3.1 6.5 https://www.mozilla.org/security/advisories/mfsa2024-59/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2024-59/
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-10463.json
https://api.first.org/data/v1/epss?cve=CVE-2024-10463
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10463
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2322439 https://bugzilla.redhat.com/show_bug.cgi?id=2322439
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
CVE-2024-10463 https://nvd.nist.gov/vuln/detail/CVE-2024-10463
GLSA-202412-06 https://security.gentoo.org/glsa/202412-06
GLSA-202501-10 https://security.gentoo.org/glsa/202501-10
GLSA-202505-08 https://security.gentoo.org/glsa/202505-08
mfsa2024-55 https://www.mozilla.org/en-US/security/advisories/mfsa2024-55
mfsa2024-55 https://www.mozilla.org/security/advisories/mfsa2024-55/
mfsa2024-56 https://www.mozilla.org/en-US/security/advisories/mfsa2024-56
mfsa2024-56 https://www.mozilla.org/security/advisories/mfsa2024-56/
mfsa2024-57 https://www.mozilla.org/en-US/security/advisories/mfsa2024-57
mfsa2024-57 https://www.mozilla.org/security/advisories/mfsa2024-57/
mfsa2024-58 https://www.mozilla.org/en-US/security/advisories/mfsa2024-58
mfsa2024-58 https://www.mozilla.org/security/advisories/mfsa2024-58/
mfsa2024-59 https://www.mozilla.org/en-US/security/advisories/mfsa2024-59
mfsa2024-59 https://www.mozilla.org/security/advisories/mfsa2024-59/
RHSA-2024:8720 https://access.redhat.com/errata/RHSA-2024:8720
RHSA-2024:8721 https://access.redhat.com/errata/RHSA-2024:8721
RHSA-2024:8722 https://access.redhat.com/errata/RHSA-2024:8722
RHSA-2024:8723 https://access.redhat.com/errata/RHSA-2024:8723
RHSA-2024:8724 https://access.redhat.com/errata/RHSA-2024:8724
RHSA-2024:8725 https://access.redhat.com/errata/RHSA-2024:8725
RHSA-2024:8726 https://access.redhat.com/errata/RHSA-2024:8726
RHSA-2024:8727 https://access.redhat.com/errata/RHSA-2024:8727
RHSA-2024:8728 https://access.redhat.com/errata/RHSA-2024:8728
RHSA-2024:8729 https://access.redhat.com/errata/RHSA-2024:8729
RHSA-2024:8790 https://access.redhat.com/errata/RHSA-2024:8790
RHSA-2024:8793 https://access.redhat.com/errata/RHSA-2024:8793
RHSA-2024:9015 https://access.redhat.com/errata/RHSA-2024:9015
RHSA-2024:9016 https://access.redhat.com/errata/RHSA-2024:9016
RHSA-2024:9017 https://access.redhat.com/errata/RHSA-2024:9017
RHSA-2024:9018 https://access.redhat.com/errata/RHSA-2024:9018
RHSA-2024:9019 https://access.redhat.com/errata/RHSA-2024:9019
RHSA-2024:9552 https://access.redhat.com/errata/RHSA-2024:9552
RHSA-2024:9554 https://access.redhat.com/errata/RHSA-2024:9554
show_bug.cgi?id=1920800 https://bugzilla.mozilla.org/show_bug.cgi?id=1920800
USN-7086-1 https://usn.ubuntu.com/7086-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-10463.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-10463.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://bugzilla.mozilla.org/show_bug.cgi?id=1920800
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-29T14:52:00Z/ Found at https://bugzilla.mozilla.org/show_bug.cgi?id=1920800
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-10463
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-10463
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://www.mozilla.org/security/advisories/mfsa2024-55/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-31T17:42:29Z/ Found at https://www.mozilla.org/security/advisories/mfsa2024-55/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://www.mozilla.org/security/advisories/mfsa2024-56/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-31T17:42:29Z/ Found at https://www.mozilla.org/security/advisories/mfsa2024-56/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://www.mozilla.org/security/advisories/mfsa2024-57/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-31T17:42:29Z/ Found at https://www.mozilla.org/security/advisories/mfsa2024-57/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://www.mozilla.org/security/advisories/mfsa2024-58/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-31T17:42:29Z/ Found at https://www.mozilla.org/security/advisories/mfsa2024-58/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://www.mozilla.org/security/advisories/mfsa2024-59/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-31T17:42:29Z/ Found at https://www.mozilla.org/security/advisories/mfsa2024-59/
Exploit Prediction Scoring System (EPSS)
Percentile 0.11214
EPSS Score 0.00044
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
2024-10-29T17:16:17.860015+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2024/mfsa2024-56.yml 34.0.2