CVE-2024-11702

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 133 Thunderbird versions prior to 133

Description: The issue is related to the Private Browsing Mode in Mozilla Firefox and Thunderbird on Android operating systems. It involves the potential for sensitive information, such as passwords, to be inadvertently stored in the cloud-based clipboard history if this feature is enabled. This could allow a remote attacker to gain unauthorized access to protected information.

Recommendations: For Mozilla Firefox versions prior to 133, update to version 133 or later to resolve the issue. For Thunderbird versions prior to 133, update to version 133 or later to resolve the issue. As a temporary workaround, consider disabling the cloud-based clipboard history feature until a patch is available. Restrict access to sensitive information in Private Browsing tabs to minimize the risk of exploitation.