CVE-2024-7518

Description

Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

Problem types

Fullscreen notification dialog can be obscured by document content

Product status

Credits

Shaheen Fazim

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1875354

https://www.mozilla.org/security/advisories/mfsa2024-33/

https://www.mozilla.org/security/advisories/mfsa2024-35/

https://www.mozilla.org/security/advisories/mfsa2024-37/

cve.org CVE-2024-7518

nvd.nist.gov CVE-2024-7518

Download JSON