9.1
Critical
CVE-2023-29534 Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
Description
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox for Android 112 | earliest → < 112 | 112 |
| Focus for Android 112 | earliest → < 112 | 112 |
References
- bugzilla.mozilla.org bugzilla.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- www.mozilla.org www.mozilla.org
Timeline
- Published
- Last modified
Other CVEs of Firefox for Android
The 33 CVEs of Firefox for Android →
CVE-2024-8897
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a…
6.1
Medium
CVE-2023-29546
When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden,…
6.5
Medium
CVE-2023-25747
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below…
7.5
High
CVE-2023-29550
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9
8.8
High