Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
Firefox can turn camera back on without asking
published 5 days ago
Summary
In Firefox, if you have previously allowed a site to use your microphone and camera, turning off the camera in the settings does not stop the site from turning it back on. The website can reactivate the camera without showing a new permission prompt, potentially capturing video without your knowledge. Review site permissions regularly and consider revoking camera access for sites you do not trust.
What to do
- Update cleanstart firefox to version 89.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | firefox |
< 89.0-r0 Fix: upgrade to 89.0-r0
|
Original advisory text
When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it without an additional prompt
Security vulnerability affects the firefox package. When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it without an additional prompt.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-HR62043 · OSV
Track software like this
Free during beta