CESS-2025-1019 — Vulnetix

CESS-2025-1019 PUBLISHED CVSS 4.3 MEDIUM

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

Risk Scores

CVSS 3.1

4.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Timeline

Feb 4, 2025 CVE Published

Open in Interactive Console →