CVE-2024-9391

Summary

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 131.

Affected Software

Weaknesses

• Prevent users from exiting full-screen mode in Firefox Focus for Android

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1892407
• https://www.mozilla.org/security/advisories/mfsa2024-46/

• ←Previous
• Next→