CVE-2023-29534
published 2023-06-19CVE-2023-29534: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and…
PriorityP345critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
0.70%
49.0th percentile
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks.
*This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 112.0 | 112.0 |
| mozilla | firefox | — | — |
| mozilla | firefox_focus | < 112.0 | 112.0 |
| mozilla | firefox_for_android | >= unspecified < 112 | 112 |
| mozilla | focus_for_android | >= unspecified < 112 | 112 |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
osv9.1CRITICAL
vendor_debian9.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-29534: firefox - Different techniques existed to obscure the fullscreen notification in Firefox a...
vendor_debian·2023·CVSS 9.1
CVE-2023-29534 [CRITICAL] CVE-2023-29534: firefox - Different techniques existed to obscure the fullscreen notification in Firefox a...
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2023-13: CVE-2023-29534
vendor_mozilla·CVSS 9.1
CVE-2023-29534 [CRITICAL] Mozilla Foundation Security Advisory 2023-13: CVE-2023-29534
Mozilla Foundation Security Advisory 2023-13
CVE: CVE-2023-29534
Product: Firefox, Firefox for Android, Focus for Android
Impact: high
Fixed in: Firefox 112
Firefox for Android 112
Focus for Android 112
OSV
CVE-2023-29534: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
osv·2023-06-19·CVSS 9.1
CVE-2023-29534 [CRITICAL] CVE-2023-29534: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
GHSA
GHSA-4g28-wh72-jhwq: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
ghsa_unreviewed·2023-06-19
CVE-2023-29534 [CRITICAL] GHSA-4g28-wh72-jhwq: Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks.
*This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
No detection rules found.
No public exploits indexed.
https://bugzilla.mozilla.org/show_bug.cgi?id=1816007https://bugzilla.mozilla.org/show_bug.cgi?id=1816059https://bugzilla.mozilla.org/show_bug.cgi?id=1821155https://bugzilla.mozilla.org/show_bug.cgi?id=1821576https://bugzilla.mozilla.org/show_bug.cgi?id=1821906https://bugzilla.mozilla.org/show_bug.cgi?id=1822298https://bugzilla.mozilla.org/show_bug.cgi?id=1822305https://www.mozilla.org/security/advisories/mfsa2023-13/https://bugzilla.mozilla.org/show_bug.cgi?id=1816007https://bugzilla.mozilla.org/show_bug.cgi?id=1816059https://bugzilla.mozilla.org/show_bug.cgi?id=1821155https://bugzilla.mozilla.org/show_bug.cgi?id=1821576https://bugzilla.mozilla.org/show_bug.cgi?id=1821906https://bugzilla.mozilla.org/show_bug.cgi?id=1822298https://bugzilla.mozilla.org/show_bug.cgi?id=1822305https://www.mozilla.org/security/advisories/mfsa2023-13/
2023-06-19
Published