What’s Vulnerable › Vulnerabilities

CVE-2024-38312

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-13 · updated 2026-08-19
• Weakness: CWE-922

Description

When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.

Affected products

• Mozilla Firefox for Android: before 127.0 — fixed in 127.0

How to fix

Upgrade to a fixed version: Mozilla Firefox for Android 127.0. Check the vendor advisory for mitigations.

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1878578
• https://www.mozilla.org/security/advisories/mfsa2024-27/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1878578
• https://www.mozilla.org/security/advisories/mfsa2024-27/

Get alerted when CVE-2024-38312 or the next vulnerability affects your stack