CVE-2024-53975
Quick assessment
Affected
Mozilla Firefox for iOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。 Mozilla Firefox 133版本之前存在安全漏洞，该漏洞源于访问使用不存在端口的非安全HTTP站点可能会导致位置URL栏中的SSL挂锁图标产生安全误报。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-53975
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS < 133.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Mozilla Firefox 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。 Mozilla Firefox 133版本之前存在安全漏洞，该漏洞源于访问使用不存在端口的非安全HTTP站点可能会导致位置URL栏中的SSL挂锁图标产生安全误报。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Mozilla | Firefox for iOS | unspecified ~ 133 | - |
|
II. Public POCs for CVE-2024-53975
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-53975
请登录查看更多情报信息。
Same Patch Batch · Mozilla · 2024-11-26 · 22 CVEs total
| CVE-2024-11694 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-53976 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11699 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11708 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11706 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11705 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11698 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11704 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11697 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11696 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11703 | Mozilla Firefox 安全漏洞 | |
| CVE-2023-1521 | Local Privilege Escalation in sccache | |
| CVE-2024-11693 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11695 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11692 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11701 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11702 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11700 | Mozilla Firefox 安全漏洞 | |
| CVE-2024-11691 | Mozilla Firefox 安全漏洞 | |
| CVE-2023-0163 | Prototype Pollution in convict |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Firefox for iOS
-
CVE-2026-14906
Malicious webpage titles could allow overwriting of bundled -
CVE-2026-13356
Interrupted navigation could allow address bar origin spoofi -
CVE-2026-53900
Cookie injection was possible when opening a PDF link -
CVE-2026-53899
Cross-origin cookies could be leaked when opening a PDF link -
CVE-2026-9308
Arbitrary JavaScript execution in Reader View due to wrong H
Same vendor: Mozilla
-
CVE-2026-74989
Internally found bugs fixed in Firefox 154 -
CVE-2026-74988
Internally found bugs fixed in Firefox ESR 153.1 and Firefox -
CVE-2026-74984
Race condition in the JavaScript Engine component -
CVE-2026-74985
Privilege escalation in the Enterprise Policies component -
CVE-2026-74982
Denial-of-service in the Widget component
V. Comments for CVE-2024-53975
No comments yet