| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 144.0 | 144.0 |
| thunderbird | < 144.0 | 144.0 |
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free