We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `<select>` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.
Reserved 2024-07-09 | Published 2024-07-09 | Updated 2024-09-12 | Assigner mozillaLeaving pointerlock by pressing the escape key could be prevented
Irvan Kurniawan
bugzilla.mozilla.org/show_bug.cgi?id=1694513
www.mozilla.org/security/advisories/mfsa2024-29/
www.mozilla.org/security/advisories/mfsa2024-32/
Support options
