{"id":"CVE-2024-38312","aliases":["EUVD-2024-37260","GHSA-ffh4-92gv-qvv5"],"status":"published","title":"When browsing private tabs, some data related to location history or webpage thumbnails could be...","description":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS \u003c 127.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00294,"percentile":0.22323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-922"],"published":"2024-06-13T20:01:13Z","modified":"2026-10-28T02:31:07Z","products":[{"vendor":"mozilla","product":"firefox for ios"},{"vendor":"mozilla","product":"firefox_mobile"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1878578","tags":["x_transferred","Issue Tracking","Permissions Required","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-27/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38312","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-27"},{"url":"https://github.com/advisories/GHSA-ffh4-92gv-qvv5"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38312.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-38312","description":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS \u003c 127.","status":"published","published":"2024-06-13T20:01:13.543Z","modified":"2025-03-19T14:17:43.824Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:34:16.367792Z"}],"euvd":[{"id":"EUVD-2024-37260","description":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS \u003c 127.","status":"published","published":"2024-06-13T20:01:13Z","modified":"2025-03-19T14:17:43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:59.10334Z"}],"ghsa":[{"id":"GHSA-ffh4-92gv-qvv5","title":"When browsing private tabs, some data related to location history or webpage thumbnails could be...","description":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS \u003c 127.","status":"published","published":"2024-06-13T21:30:53Z","modified":"2024-10-30T21:30:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:58:39.78243Z"}],"nvd":[{"id":"CVE-2024-38312","description":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS \u003c 127.","status":"published","published":"2024-06-13T20:15:15.37Z","modified":"2026-08-19T15:30:33.807Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:10:05.620461Z"}],"osv":[{"id":"CVE-2024-38312","description":"When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS \u003c 127.","status":"published","published":"2024-06-13T20:01:13.543Z","modified":"2026-10-28T02:31:07.230889211Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:41.133403Z"}]}}