CVE-2024-4773 When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126.

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CSP and Network Vulnerabilities Affect Firefox and Thunderbird Users Two vulnerabilities have been identified affecting Firefox and Thunderbird. CVE-2024-6612 allows CSP violations to generate links in the console, leading to DNS prefetching and potential information leakage, impacting Firefox and Thunderbird versions below 128. CVE-2024-4773 permits prior content to remain visible during network errors, which could be exploited to spoof websites, affecting Firefox versions below 126. 2 sources 69

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)