CLEANSTART-2024-TY73658 When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks

🗓️ 31 Oct 2026 14:30:05Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 14 Views

Firefox allows reusing popups to cover fullscreen notification UI, enabling browser spoofing.

Reporter	Title	Published	Views	Family All 207
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.9.0-alt1	4 May 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.9.0-alt1	4 May 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.2ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	15 Nov 202205:24	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2022-1828)	21 Jul 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : firefox (ALSA-2022:1705)	12 May 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : thunderbird (ALSA-2022:1730)	12 May 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : thunderbird (ALSA-2022:4589)	16 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2022:4590)	16 Nov 202200:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2022:1703)	6 May 202200:00	–	nessus

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-TY73658.json
osv	www.osv.dev/vulnerability/CVE-2022-29914
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-29914

31 Oct 2026 16:02Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.5

EPSS0.00661

Firefox browser spoofing fullscreen notification UI