When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7.
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
Link | Tags |
---|---|
https://www.mozilla.org/security/advisories/mfsa2022-12/ | vendor advisory |
https://www.mozilla.org/security/advisories/mfsa2022-10/ | vendor advisory |
https://www.mozilla.org/security/advisories/mfsa2022-11/ | vendor advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=1742421 | issue tracking vendor advisory |