Astra Linux – vulnerability in Chromium

After using “free” in Fullscreen within Google Chrome prior to version 154.0.8037.57, a remote attacker could potentially execute arbitrary code outside the sandbox by using a specially crafted HTML page. Chromium security severity: Critical...

CLEANSTART-2024-VE42253 After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode

Security vulnerability affects the librewolf package. After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode...

CLEANSTART-2024-BJ94999 It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user

CVE-2020-26953 affects multiple packages. It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. See references for individual vulnerability details...

CLEANSTART-2024-VY51713 When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode

CVE-2022-22743 affects multiple packages. When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. See references for individual vulnerability details...

CLEANSTART-2024-TZ04308 When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode

CVE-2022-22741 affects multiple packages. When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. See references for individual vulnerability details...

CLEANSTART-2024-AK88182 When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification

CVE-2022-26383 affects multiple packages. When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. See references for individual vulnerability details...

CLEANSTART-2024-TY73658 When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks

CVE-2022-29914 affects multiple packages. When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. See references for individual vulnerability details...

CLEANSTART-2024-XD03246 When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks

CVE-2022-31738 affects multiple packages. When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. See references for individual vulnerability details...

CLEANSTART-2024-AD94026 Inappropriate implementation in Fullscreen in Google Chrome prior to 118

Security vulnerability affects the qt6-qtwebengine package. Inappropriate implementation in Fullscreen in Google Chrome prior to 118...

CLEANSTART-2024-ZN74408 After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode

Security vulnerability affects the firefox package. After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode...

CVE-2026-119730

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

CLEANSTART-2024-LP21995 When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode

CVE-2022-22741 affects multiple packages. When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. See references for individual vulnerability details...

CLEANSTART-2024-ST21379 Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit

Security vulnerability affects the firefox package. Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit...

CLEANSTART-2024-TX67794 race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed

CVE-2022-22746 affects multiple packages. A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed. See references for individual vulnerability details...

CLEANSTART-2024-OP53396 When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode

CVE-2022-22743 affects multiple packages. When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. See references for individual vulnerability details...

CLEANSTART-2024-XU55082 When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification

CVE-2022-26383 affects multiple packages. When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. See references for individual vulnerability details...

CLEANSTART-2024-YQ81254 When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks

CVE-2022-29914 affects multiple packages. When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. See references for individual vulnerability details...

EUVD-2026-114365

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

CVE-2026-119730

Maxthon Browser for Android versions before 7.5.8.103 are vulnerable to an address bar spoofing flaw. The issue stems from a lack of persistent fullscreen notifications or trusted origin indicators when the Fullscreen API is invoked. This allows remote attackers to craft malicious web pages that ...

CVE-2026-119730 Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...