CVE-2024-3863

The executable file warning was not presented when downloading .xrm-ms files.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

Published: Apr 16, 2024
Updated: May 4, 2025
CVE: CVE-2024-3863
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mozilla / thunderbird	-	115.10
mozilla / firefox	-	115.10.0
mozilla / firefox	-	125.0

https://bugzilla.mozilla.org/show_bug.cgi?id=1885855
https://www.mozilla.org/security/advisories/mfsa2024-18/
https://www.mozilla.org/security/advisories/mfsa2024-19/
https://www.mozilla.org/security/advisories/mfsa2024-20/

Vulnerability Database

CVE-2024-3863

Deep Security Visibility Without the Complexity