CVE-2023-29534

2023-06-1910:11:00

mozilla

www.cve.org

vulnerability

firefox

focus for android

user confusion

spoofing attacks

cve-2023-29534

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.4%

JSON

Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks.

This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Firefox for Android",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "112",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Focus for Android",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "112",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]