CVE-2023-5726

Summary

A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. Note: This issue only affected macOS operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 119affected
MozillaFirefox ESRunspecified < 115.4affected
MozillaThunderbirdunspecified < 115.4.1affected

Weaknesses

  • Full screen notification obscured by file open dialog on macOS

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References