CVE-2023-29534

published 2023-06-19

CVE-2023-29534: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and…

critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks.

*This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	firefox	—	—
mozilla	firefox	< 112.0	112.0
mozilla	firefox	—	—
mozilla	firefox_focus	< 112.0	112.0
mozilla	firefox_for_android	>= unspecified < 112	112
mozilla	focus_for_android	>= unspecified < 112	112

CVSS provenance

nvd v3.1 9.1 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

osv 9.1 CRITICAL