CVE-2024-5692

Mozilla Firefox ESR and 6 others: On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into…

CVE-2024-5692 is fixed in 170 products on 2 platforms, first by Firefox Developer Edition (en-US) 127.0, released May 14, 2024. It is not reported as exploited. Patch Radar priority: Routine.

RoutineFixed on 2 platforms
CVSS
6.5
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0062
49th percentile

On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.url` by including an invalid character in the extension. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

Where it's fixed

ProductFixed inFixReleased
Windows apps
Firefox Developer Edition (en-US) 127.0 Firefox Developer Edition (en-US) 127.0 May 14, 2024
Mozilla Firefox (en-US) 127.0 Mozilla Firefox (en-US) 127.0 Jun 11, 2024
Mozilla Firefox ESR (ach) 128.3.0 Mozilla Firefox ESR (ach) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (af) 128.3.0 Mozilla Firefox ESR (af) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (an) 128.3.0 Mozilla Firefox ESR (an) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ar) 128.3.0 Mozilla Firefox ESR (ar) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ast) 128.3.0 Mozilla Firefox ESR (ast) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (az) 128.3.0 Mozilla Firefox ESR (az) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (be) 128.3.0 Mozilla Firefox ESR (be) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (bg) 128.3.0 Mozilla Firefox ESR (bg) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (bn) 128.3.0 Mozilla Firefox ESR (bn) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (br) 128.3.0 Mozilla Firefox ESR (br) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (bs) 128.3.0 Mozilla Firefox ESR (bs) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ca) 128.3.0 Mozilla Firefox ESR (ca) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ca-valencia) 128.3.0 Mozilla Firefox ESR (ca-valencia) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (cak) 128.3.0 Mozilla Firefox ESR (cak) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (cs) 128.3.0 Mozilla Firefox ESR (cs) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (cy) 128.3.0 Mozilla Firefox ESR (cy) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (da) 128.3.0 Mozilla Firefox ESR (da) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (de) 128.3.0 Mozilla Firefox ESR (de) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (dsb) 128.3.0 Mozilla Firefox ESR (dsb) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (el) 128.3.0 Mozilla Firefox ESR (el) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (en-CA) 128.3.0 Mozilla Firefox ESR (en-CA) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (en-GB) 128.3.0 Mozilla Firefox ESR (en-GB) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (en-US) 128.3.0 Mozilla Firefox ESR (en-US) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (eo) 128.3.0 Mozilla Firefox ESR (eo) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (es-AR) 128.3.0 Mozilla Firefox ESR (es-AR) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (es-CL) 128.3.0 Mozilla Firefox ESR (es-CL) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (es-ES) 128.3.0 Mozilla Firefox ESR (es-ES) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (es-MX) 128.3.0 Mozilla Firefox ESR (es-MX) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (et) 128.3.0 Mozilla Firefox ESR (et) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (eu) 128.3.0 Mozilla Firefox ESR (eu) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (fa) 128.3.0 Mozilla Firefox ESR (fa) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ff) 128.3.0 Mozilla Firefox ESR (ff) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (fi) 128.3.0 Mozilla Firefox ESR (fi) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (fr) 128.3.0 Mozilla Firefox ESR (fr) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (fur) 128.3.0 Mozilla Firefox ESR (fur) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (fy-NL) 128.3.0 Mozilla Firefox ESR (fy-NL) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ga-IE) 128.3.0 Mozilla Firefox ESR (ga-IE) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (gd) 128.3.0 Mozilla Firefox ESR (gd) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (gl) 128.3.0 Mozilla Firefox ESR (gl) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (gn) 128.3.0 Mozilla Firefox ESR (gn) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (gu-IN) 128.3.0 Mozilla Firefox ESR (gu-IN) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (he) 128.3.0 Mozilla Firefox ESR (he) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (hi-IN) 128.3.0 Mozilla Firefox ESR (hi-IN) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (hr) 128.3.0 Mozilla Firefox ESR (hr) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (hsb) 128.3.0 Mozilla Firefox ESR (hsb) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (hu) 128.3.0 Mozilla Firefox ESR (hu) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (hy-AM) 128.3.0 Mozilla Firefox ESR (hy-AM) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ia) 128.3.0 Mozilla Firefox ESR (ia) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (id) 128.3.0 Mozilla Firefox ESR (id) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (is) 128.3.0 Mozilla Firefox ESR (is) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (it) 128.3.0 Mozilla Firefox ESR (it) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ja) 128.3.0 Mozilla Firefox ESR (ja) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ka) 128.3.0 Mozilla Firefox ESR (ka) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (kab) 128.3.0 Mozilla Firefox ESR (kab) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (kk) 128.3.0 Mozilla Firefox ESR (kk) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (km) 128.3.0 Mozilla Firefox ESR (km) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (kn) 128.3.0 Mozilla Firefox ESR (kn) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ko) 128.3.0 Mozilla Firefox ESR (ko) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (lij) 128.3.0 Mozilla Firefox ESR (lij) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (lt) 128.3.0 Mozilla Firefox ESR (lt) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (lv) 128.3.0 Mozilla Firefox ESR (lv) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (mk) 128.3.0 Mozilla Firefox ESR (mk) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (mr) 128.3.0 Mozilla Firefox ESR (mr) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ms) 128.3.0 Mozilla Firefox ESR (ms) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (my) 128.3.0 Mozilla Firefox ESR (my) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (nb-NO) 128.3.0 Mozilla Firefox ESR (nb-NO) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ne-NP) 128.3.0 Mozilla Firefox ESR (ne-NP) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (nl) 128.3.0 Mozilla Firefox ESR (nl) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (nn-NO) 128.3.0 Mozilla Firefox ESR (nn-NO) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (oc) 128.3.0 Mozilla Firefox ESR (oc) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (pa-IN) 128.3.0 Mozilla Firefox ESR (pa-IN) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (pl) 128.3.0 Mozilla Firefox ESR (pl) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (pt-BR) 128.3.0 Mozilla Firefox ESR (pt-BR) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (pt-PT) 128.3.0 Mozilla Firefox ESR (pt-PT) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (rm) 128.3.0 Mozilla Firefox ESR (rm) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ro) 128.3.0 Mozilla Firefox ESR (ro) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ru) 128.3.0 Mozilla Firefox ESR (ru) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (sc) 128.3.0 Mozilla Firefox ESR (sc) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (sco) 128.3.0 Mozilla Firefox ESR (sco) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (si) 128.3.0 Mozilla Firefox ESR (si) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (sk) 128.3.0 Mozilla Firefox ESR (sk) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (sl) 128.3.0 Mozilla Firefox ESR (sl) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (son) 128.3.0 Mozilla Firefox ESR (son) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (sq) 128.3.0 Mozilla Firefox ESR (sq) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (sr) 128.3.0 Mozilla Firefox ESR (sr) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (sv-SE) 128.3.0 Mozilla Firefox ESR (sv-SE) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (szl) 128.3.0 Mozilla Firefox ESR (szl) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ta) 128.3.0 Mozilla Firefox ESR (ta) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (te) 128.3.0 Mozilla Firefox ESR (te) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (tg) 128.3.0 Mozilla Firefox ESR (tg) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (th) 128.3.0 Mozilla Firefox ESR (th) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (tl) 128.3.0 Mozilla Firefox ESR (tl) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (tr) 128.3.0 Mozilla Firefox ESR (tr) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (trs) 128.3.0 Mozilla Firefox ESR (trs) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (uk) 128.3.0 Mozilla Firefox ESR (uk) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (ur) 128.3.0 Mozilla Firefox ESR (ur) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (uz) 128.3.0 Mozilla Firefox ESR (uz) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (vi) 128.3.0 Mozilla Firefox ESR (vi) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (xh) 128.3.0 Mozilla Firefox ESR (xh) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (zh-CN) 128.3.0 Mozilla Firefox ESR (zh-CN) 128.3.0 Oct 1, 2024
Mozilla Firefox ESR (zh-TW) 128.3.0 Mozilla Firefox ESR (zh-TW) 128.3.0 Oct 1, 2024
Mozilla Thunderbird (af) 115.12.1 Mozilla Thunderbird (af) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ar) 115.12.1 Mozilla Thunderbird (ar) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ast) 115.12.1 Mozilla Thunderbird (ast) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (be) 115.12.1 Mozilla Thunderbird (be) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (bg) 115.12.1 Mozilla Thunderbird (bg) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (br) 115.12.1 Mozilla Thunderbird (br) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ca) 115.12.1 Mozilla Thunderbird (ca) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (cs) 115.12.1 Mozilla Thunderbird (cs) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (cy) 115.12.1 Mozilla Thunderbird (cy) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (da) 115.12.1 Mozilla Thunderbird (da) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (de) 115.12.1 Mozilla Thunderbird (de) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (dsb) 115.12.1 Mozilla Thunderbird (dsb) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (el) 115.12.1 Mozilla Thunderbird (el) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (en-CA) 115.12.1 Mozilla Thunderbird (en-CA) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (en-GB) 115.12.1 Mozilla Thunderbird (en-GB) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (en-US) 115.12.1 Mozilla Thunderbird (en-US) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (es-AR) 115.12.1 Mozilla Thunderbird (es-AR) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (es-ES) 115.12.1 Mozilla Thunderbird (es-ES) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (es-MX) 115.12.1 Mozilla Thunderbird (es-MX) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (et) 115.12.1 Mozilla Thunderbird (et) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (eu) 115.12.1 Mozilla Thunderbird (eu) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (fi) 115.12.1 Mozilla Thunderbird (fi) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (fr) 115.12.1 Mozilla Thunderbird (fr) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (fy-NL) 115.12.1 Mozilla Thunderbird (fy-NL) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ga-IE) 115.12.1 Mozilla Thunderbird (ga-IE) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (gd) 115.12.1 Mozilla Thunderbird (gd) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (gl) 115.12.1 Mozilla Thunderbird (gl) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (he) 115.12.1 Mozilla Thunderbird (he) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (hr) 115.12.1 Mozilla Thunderbird (hr) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (hsb) 115.12.1 Mozilla Thunderbird (hsb) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (hu) 115.12.1 Mozilla Thunderbird (hu) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (hy-AM) 115.12.1 Mozilla Thunderbird (hy-AM) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (id) 115.12.1 Mozilla Thunderbird (id) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (is) 115.12.1 Mozilla Thunderbird (is) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (it) 115.12.1 Mozilla Thunderbird (it) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ja) 115.12.1 Mozilla Thunderbird (ja) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ka) 115.12.1 Mozilla Thunderbird (ka) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (kab) 115.12.1 Mozilla Thunderbird (kab) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (kk) 115.12.1 Mozilla Thunderbird (kk) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ko) 115.12.1 Mozilla Thunderbird (ko) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (lt) 115.12.1 Mozilla Thunderbird (lt) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (lv) 115.12.1 Mozilla Thunderbird (lv) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ms) 115.12.1 Mozilla Thunderbird (ms) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (nb-NO) 115.12.1 Mozilla Thunderbird (nb-NO) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (nl) 115.12.1 Mozilla Thunderbird (nl) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (nn-NO) 115.12.1 Mozilla Thunderbird (nn-NO) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (pa-IN) 115.12.1 Mozilla Thunderbird (pa-IN) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (pl) 115.12.1 Mozilla Thunderbird (pl) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (pt-BR) 115.12.1 Mozilla Thunderbird (pt-BR) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (pt-PT) 115.12.1 Mozilla Thunderbird (pt-PT) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (rm) 115.12.1 Mozilla Thunderbird (rm) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ro) 115.12.1 Mozilla Thunderbird (ro) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (ru) 115.12.1 Mozilla Thunderbird (ru) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (sk) 115.12.1 Mozilla Thunderbird (sk) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (sl) 115.12.1 Mozilla Thunderbird (sl) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (sq) 115.12.1 Mozilla Thunderbird (sq) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (sr) 115.12.1 Mozilla Thunderbird (sr) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (sv-SE) 115.12.1 Mozilla Thunderbird (sv-SE) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (th) 115.12.1 Mozilla Thunderbird (th) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (tr) 115.12.1 Mozilla Thunderbird (tr) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (uk) 115.12.1 Mozilla Thunderbird (uk) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (uz) 115.12.1 Mozilla Thunderbird (uz) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (vi) 115.12.1 Mozilla Thunderbird (vi) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (zh-CN) 115.12.1 Mozilla Thunderbird (zh-CN) 115.12.1 Jun 19, 2024
Mozilla Thunderbird (zh-TW) 115.12.1 Mozilla Thunderbird (zh-TW) 115.12.1 Jun 19, 2024
Linux
MozillaFirefox · opensuse-leap 15.6 115.13.0-150200.152.143.1 SUSE-SU-2024:2399-1 Jul 11, 2024
MozillaFirefox · sles 15.6 115.13.0-150200.152.143.1 SUSE-SU-2024:2399-1 Jul 11, 2024
MozillaThunderbird · opensuse-leap 15.6 115.12.0-150200.8.163.1 SUSE-SU-2024:2073-1 Jun 18, 2024
MozillaThunderbird · sles 15.6 115.12.0-150200.8.163.1 SUSE-SU-2024:2073-1 Jun 18, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.