CVE advisoryCRITICAL
CVE-2024-3863
Firefox and Thunderbird Executable File Warning Bypass Vulnerability.
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in Firefox and Thunderbird where the executable file warning is not presented when downloading .xrm-ms files on Windows. This could allow malicious files to be downloaded without user awareness.