CVE-2023-29534
Fixed in a distro release EPSS <1%CVSS 9.1
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.
Products: Mozilla Firefox for Android, Mozilla Focus for Android
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 18.04 LTS | mozjs38 | no fix |
| Ubuntu 18.04 LTS | mozjs52 | no fix |
| Ubuntu 20.04 LTS | mozjs52 | no fix |
| Ubuntu 20.04 LTS | mozjs68 | no fix |
| Ubuntu 22.04 LTS | mozjs78 | no fix |
| Ubuntu 22.04 LTS | mozjs91 | no fix |
| openSUSE Tumbleweed | MozillaFirefox | 112.0.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |