CVE-2024-5692 | BDVDB-2026-239098 Detail

Description#

On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.url` by including an invalid character in the extension. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-06-11Record published in the CVE List.
2. Version 22026-02-27Most recent update recorded in the CVE List.