Spoofing Issue in Mozilla Firefox and Thunderbird
CVE-2025-1018
Currently unrated
Summary
A vulnerability exists in Mozilla Firefox and Thunderbird where the fullscreen notification is hidden too quickly when the user re-requests fullscreen mode. This flaw could be exploited to execute potential spoofing attacks, compromising user trust and security. Users of Firefox version 135 and earlier, as well as Thunderbird version 135 and earlier, should take precautions to safeguard their systems from possible exploitation.
Affected Version(s)
Firefox < 135
Thunderbird < 135
References
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Irvan Kurniawan