CVE-2023-28159
published 2023-06-02CVE-2023-28159: The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks…
PriorityP417medium4.3CVSS 3.1
AVNACLPRNUIRSUCNILAN
EPSS
0.35%
27.5th percentile
The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 111.0 | 111.0 |
| mozilla | firefox | — | — |
| mozilla | firefox | >= unspecified < 111 | 111 |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
osv4.3MEDIUM
vendor_debian4.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-28159: The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing
osv·2023-06-02·CVSS 4.3
CVE-2023-28159 [MEDIUM] CVE-2023-28159: The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing
The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.
GHSA
GHSA-573m-fgh4-jc94: The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing
ghsa_unreviewed·2023-06-02
CVE-2023-28159 [MEDIUM] CWE-1021 GHSA-573m-fgh4-jc94: The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing
The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.
Debian
CVE-2023-28159: firefox - The fullscreen notification could have been hidden on Firefox for Android by usi...
vendor_debian·2023·CVSS 4.3
CVE-2023-28159 [MEDIUM] CVE-2023-28159: firefox - The fullscreen notification could have been hidden on Firefox for Android by usi...
The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2023-09: CVE-2023-28159
vendor_mozilla·CVSS 4.3
CVE-2023-28159 [MEDIUM] Mozilla Foundation Security Advisory 2023-09: CVE-2023-28159
Mozilla Foundation Security Advisory 2023-09
CVE: CVE-2023-28159
Product: Firefox
Impact: high
Fixed in: Firefox 111
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-06-02
Published