Astra Linux – vulnerability in Chromium

After using “free” in Fullscreen within Google Chrome prior to version 154.0.8037.57, a remote attacker could potentially execute arbitrary code outside the sandbox by using a specially crafted HTML page. Chromium security severity: Critical...

CLEANSTART-2024-VE42253 After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode

Security vulnerability affects the librewolf package. After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode...

CLEANSTART-2024-BJ94999 It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user

CVE-2020-26953 affects multiple packages. It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. See references for individual vulnerability details...

CLEANSTART-2024-VY51713 When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode

CVE-2022-22743 affects multiple packages. When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. See references for individual vulnerability details...

CLEANSTART-2024-TZ04308 When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode

CVE-2022-22741 affects multiple packages. When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. See references for individual vulnerability details...

CLEANSTART-2024-ZN74408 After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode

Security vulnerability affects the firefox package. After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode...

CLEANSTART-2024-LP21995 When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode

CVE-2022-22741 affects multiple packages. When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. See references for individual vulnerability details...

CLEANSTART-2024-ST21379 Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit

Security vulnerability affects the firefox package. Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit...

CLEANSTART-2024-OP53396 When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode

CVE-2022-22743 affects multiple packages. When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. See references for individual vulnerability details...

CLEANSTART-2024-DI93631 background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoof...

Security vulnerability affects the firefox-esr package. A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks...

CLEANSTART-2024-HN75564 malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt

Security vulnerability affects the firefox package. A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt...

FullscreenBrowserPhishing

Phishing through fullscreen mode in browser On start - i would like to note that phishing is illegal and this project is only for educational purpose. Project in this repository is only PoC to show how it can be done and that's why the public version has flaws : Demo: Resources that i used to...

Fullscreen vulnerability Google Chrome Microsoft Edge

The Fullscreen vulnerability in Google Chrome and Microsoft Edge browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a specially crafted HTML...

CVE-2026-94183 Address bar spoofing risk in affected Android versions of Arc Search

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94183: User Interface (UI) Misrepresentation of Critical Information

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

Astra Linux – Vulnerability in Firefox

A malicious website can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been exploited in a spoofing attack. This vulnerability affects Firefox versions earlier than 119...

CVE-2026-87653

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation in FullScreen mode, allowing the attacker to spoof UI elements...

CVE-2026-84330

An ui misrepresentation flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517091927...

Google Chrome Fullscreen Spoofing

The vulnerability of Google Chrome’s fullscreen mode is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

EUVD-2026-44703

Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information, imitate a trusted website UI, and...