CVE-2023-29534
published 2023-06-19CVE-2023-29534: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and…
PriorityP344critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
0.71%
52.9th percentile
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks.
*This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox_focus | < 112.0 | 112.0 |
| mozilla | firefox_for_android | >= unspecified < 112 | 112 |
| mozilla | firefox_mobile | < 112.0 | 112.0 |
| mozilla | focus_for_android | >= unspecified < 112 | 112 |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
osv9.1CRITICAL
vendor_debian9.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-29534: firefox - Different techniques existed to obscure the fullscreen notification in Firefox a...
vendor_debian·2023·CVSS 9.1
CVE-2023-29534 [CRITICAL] CVE-2023-29534: firefox - Different techniques existed to obscure the fullscreen notification in Firefox a...
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2023-13: CVE-2023-29534
vendor_mozilla·CVSS 9.1
CVE-2023-29534 [CRITICAL] Mozilla Foundation Security Advisory 2023-13: CVE-2023-29534
Mozilla Foundation Security Advisory 2023-13
CVE: CVE-2023-29534
Product: Firefox, Firefox for Android, Focus for Android
Impact: high
Fixed in: Firefox 112
Firefox for Android 112
Focus for Android 112
VulDB
Mozilla Firefox up to 111 on Android Notification (Bug 1816059)
vuldb·2026-08-21·CVSS 9.1
CVE-2023-29534 [CRITICAL] Mozilla Firefox up to 111 on Android Notification (Bug 1816059)
A vulnerability classified as problematic has been found in Mozilla Firefox up to 111 on Android. This vulnerability affects unknown code of the component Notification Handler. Performing a manipulation results in an unknown weakness.
This vulnerability is reported as CVE-2023-29534. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
OSV
CVE-2023-29534: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
osv·2023-06-19·CVSS 9.1
CVE-2023-29534 [CRITICAL] CVE-2023-29534: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
GHSA
GHSA-4g28-wh72-jhwq: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
ghsa_unreviewed·2023-06-19
CVE-2023-29534 [CRITICAL] GHSA-4g28-wh72-jhwq: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks.
*This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
No detection rules found.
No public exploits indexed.
https://bugzilla.mozilla.org/show_bug.cgi?id=1816007https://bugzilla.mozilla.org/show_bug.cgi?id=1816059https://bugzilla.mozilla.org/show_bug.cgi?id=1821155https://bugzilla.mozilla.org/show_bug.cgi?id=1821576https://bugzilla.mozilla.org/show_bug.cgi?id=1821906https://bugzilla.mozilla.org/show_bug.cgi?id=1822298https://bugzilla.mozilla.org/show_bug.cgi?id=1822305https://www.mozilla.org/security/advisories/mfsa2023-13/https://bugzilla.mozilla.org/show_bug.cgi?id=1816007https://bugzilla.mozilla.org/show_bug.cgi?id=1816059https://bugzilla.mozilla.org/show_bug.cgi?id=1821155https://bugzilla.mozilla.org/show_bug.cgi?id=1821576https://bugzilla.mozilla.org/show_bug.cgi?id=1821906https://bugzilla.mozilla.org/show_bug.cgi?id=1822298https://bugzilla.mozilla.org/show_bug.cgi?id=1822305https://www.mozilla.org/security/advisories/mfsa2023-13/
2023-06-19
Published