CLEANSTART-2024-SH67272 malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks

🗓️ 31 Oct 2026 14:29:10Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 4 Views

Malicious website popups can overlay the address bar, causing user confusion or spoofing.

Reporter	Title	Published	Views	Family All 212
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.11.0-alt1	29 Jun 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.0-alt1	29 Jun 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.2ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	15 Nov 202205:24	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2023-1951)	23 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2023-013 (ALASFIREFOX-2023-013)	27 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2022:5481)	16 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : thunderbird (ALSA-2022:5482)	16 Nov 202200:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2022:5479)	2 Aug 202200:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2022:5480)	2 Aug 202200:00	–	nessus

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-SH67272.json
osv	www.osv.dev/vulnerability/CVE-2022-34479
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-34479

31 Oct 2026 16:02Current

7High risk

Vulners AI Score7

CVSS 3.16.5

EPSS0.00761

malicious website popup address bar user confusion spoofing attacks