CVE-2024-6612 CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CSP and Network Vulnerabilities Affect Firefox and Thunderbird Users Two vulnerabilities have been identified affecting Firefox and Thunderbird. CVE-2024-6612 allows CSP violations to generate links in the console, leading to DNS prefetching and potential information leakage, impacting Firefox and Thunderbird versions below 128. CVE-2024-4773 permits prior content to remain visible during network errors, which could be exploited to spoof websites, affecting Firefox versions below 126. 2 sources 69

Extracted Entities

CVEs (1)

Platforms (2)

Firefox Thunderbird