CVE-2023-6870

2023-12-1913:38:52

mozilla

www.cve.org

cve-2023-6870

toast notification

background thread

android

firefox

vulnerability

fullscreen

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

JSON

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox.
This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox < 121.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "121",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]