CESS-2025-1018 — Vulnetix

CESS-2025-1018 PUBLISHED CVSS 5.3 MEDIUM

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

Risk Scores

CVSS 3.1

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Timeline

Feb 4, 2025 CVE Published

Open in Interactive Console →