A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefox-x11Upgrade thunderbirdUpgrade firefox | Feb 22, 2023 | Feb 20, 2023 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade firefox-debuginfo | Sep 28, 2023 | Jun 2, 2023 |
| Centos_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Feb 22, 2023 | Feb 20, 2023 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird. | May 31, 2023 | May 30, 2023 |
| Mfsa2023 05 | — | Upgrade to Mozilla Firefox version 110.0 | Feb 16, 2023 | Feb 14, 2023 |
| Mfsa2023 06 | — | Upgrade to Mozilla Firefox ESR version 102.8 | Feb 16, 2023 | Feb 14, 2023 |
| Oracle_linux | — | Upgrade firefox-x11Upgrade firefoxUpgrade thunderbird | Feb 21, 2023 | Feb 14, 2023 |
| Redhat_linux | — | Upgrade firefox-debuginfoUpgrade firefox-debugsourceUpgrade firefox-x11Upgrade thunderbird-debuginfoNo solution existsUpgrade thunderbird-debugsourceUpgrade firefoxUpgrade thunderbird | Feb 22, 2023 | Feb 20, 2023 |
| Rocky_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade firefox-x11Upgrade firefox-debuginfo | Mar 12, 2024 | Jun 2, 2023 |
| Suse | — | Upgrade mozillafirefox-translations-commonUpgrade mozillafirefox-translations-otherUpgrade mozillafirefoxUpgrade mozillafirefox-branding-upstreamUpgrade mozillafirefox-devel | Feb 21, 2023 | Feb 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub