{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T03:30:35.509","vulnerabilities":[{"cve":{"id":"CVE-2024-11700","sourceIdentifier":"security@mozilla.org","published":"2024-11-26T14:15:19.523","lastModified":"2026-06-17T06:58:16.300","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133."},{"lang":"es","value":"Es posible que los sitios web maliciosos hayan podido confirmar la intención del usuario mediante tapjacking. Esto podría haber provocado que los usuarios aprobaran sin saberlo el lanzamiento de aplicaciones externas, lo que podría exponerlos a vulnerabilidades subyacentes. Esta vulnerabilidad afecta a Firefox &lt; 133 y Thunderbird &lt; 133."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"Mozilla","product":"Firefox","versions":[{"version":"unspecified","lessThan":"133","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Thunderbird","versions":[{"version":"unspecified","lessThan":"133","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"mozilla","product":"firefox","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"133","versionType":"custom","status":"affected"}]},{"vendor":"mozilla","product":"thunderbird","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"133","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-27T15:50:18.846396Z","id":"CVE-2024-11700","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-1021"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"133.0","matchCriteriaId":"F82571FC-4DDE-4C63-BD2B-8CF2FFEA28A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"133.0","matchCriteriaId":"75D1724C-A89A-46A9-988C-09A4019D9956"}]}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1836921","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-63/","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-67/","source":"security@mozilla.org","tags":["Vendor Advisory"]}]}}]}