Skip to main content
E
Echelon
Graph
Product
Directory
Enterprise
Compliance
Pulse
AI Analyst
Compare
Docs
Login
Start Free
Pulse
›
Vendor Advisories
›
Microsoft Security Response Center (MSRC)
›
CVE-2024-6611
CVE-2024-6611
Critical
CVSS
9.8
A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.
Vendor
Microsoft Security Response Center (MSRC)
Published
May 31, 2026
Last Modified
—
🔗 CVE IDs covered (1)
CVE-2024-6611 →