description: The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.
*Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
problem types: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 119, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 115.4, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 115.4.1, status: affected, version: unspecified, versionType: custom
}
