CVE-2024-4766 | THREATINT

Assigner	mozilla
Reserved	2024-05-10
Published	2024-05-14
Updated	2024-06-04

Description

Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have lead to potential user confusion and spoofing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.

Problem types

Fullscreen notification could have been obscured on Firefox for Android

Product status

Any version before 126

affected

Credits

Hafiizh

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1871214

https://bugzilla.mozilla.org/show_bug.cgi?id=1871217

https://www.mozilla.org/security/advisories/mfsa2024-21/

cve.org CVE-2024-4766

nvd.nist.gov CVE-2024-4766

Download JSON