CVE-2023-29546

Summary

When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive information.

This bug only affects Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.

Affected Software

Weaknesses

• Screen recording in Private Browsing included address bar on Android

ADP Enrichment

CVE Program Container

Additional References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1780842
• https://www.mozilla.org/security/advisories/mfsa2023-13/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1780842
• https://www.mozilla.org/security/advisories/mfsa2023-13/

• ←Previous
• Next→