Add a note about the escape affecting only Desktop

mozilla · Mar 22, 2024 · cb6da50 · cb6da50
1 parent fef9701
commit cb6da50
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/announce/2024/mfsa2024-15.yml b/announce/2024/mfsa2024-15.yml
@@ -18,6 +18,6 @@ advisories:
     impact: critical
     reporter: Manfred Paul via Trend Micro's Zero Day Initiative
     description: |
-      An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process.
+      An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. <em>Note:</em> This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox.
     bugs:
       - url: 1886852
diff --git a/announce/2024/mfsa2024-16.yml b/announce/2024/mfsa2024-16.yml
@@ -10,6 +10,6 @@ advisories:
     impact: critical
     reporter: Manfred Paul via Trend Micro's Zero Day Initiative
     description: |
-      An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process.
+      An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. <em>Note:</em> This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox.
     bugs:
       - url: 1886852