CVE-2024-6610

MEDIUM Year: 2024
CVSS v3 Score
6.3
Medium
Weakness Type
CWE-451
View all →

Vulnerability Description

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Related Vulnerabilities

CVE-2025-0451

MEDIUM
CVSS:6.3(Medium)

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a cra...

CWE-4512025

CVE-2025-3523

MEDIUM
CVSS:6.4(Medium)

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct li...

CWE-4512025

CVE-2021-27414

MEDIUM
CVSS:6.1(Medium)

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for ...

CWE-4512021

CVE-2022-2800

MEDIUM
CVSS:6.1(Medium)

A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacki...

CWE-4512022

CVE-2022-32816

MEDIUM
CVSS:6.5(Medium)

The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may le...

CWE-4512022

CVE-2022-3313

MEDIUM
CVSS:6.5(Medium)

Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)

CWE-4512022