CLEANSTART-2024-AK88182 When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification

CVE-2022-26383 affects multiple packages. When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. See references for individual vulnerability details...

CLEANSTART-2024-TY73658 When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks

CVE-2022-29914 affects multiple packages. When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. See references for individual vulnerability details...

CLEANSTART-2024-TX67794 race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed

CVE-2022-22746 affects multiple packages. A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed. See references for individual vulnerability details...

CLEANSTART-2024-XU55082 When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification

CVE-2022-26383 affects multiple packages. When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. See references for individual vulnerability details...

CLEANSTART-2024-YQ81254 When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks

CVE-2022-29914 affects multiple packages. When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. See references for individual vulnerability details...

CLEANSTART-2024-MN28501 By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks

Security vulnerability affects the firefox-esr package. By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks...

CLEANSTART-2024-RK56908 website could have obscured the fullscreen notification by using a combination of <code>window

Security vulnerability affects the firefox-esr package. A website could have obscured the fullscreen notification by using a combination of window...

CLEANSTART-2024-MS76796 website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL

Security vulnerability affects the firefox-esr package. A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL...

CLEANSTART-2024-TB77881 website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function

Security vulnerability affects the firefox-esr package. A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function...

Astra Linux – vulnerability in Thunderbird, Firefox

By confusing the browser, the fullscreen notification could have been delayed or suppressed, potentially leading to user confusion or spoofing attacks. This vulnerability affects Firefox versions prior to 108...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2022_8547)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228547 advisory. Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2024_0955)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240955 advisory. Mozilla: Out-of-bounds memory read in networking channels CVE-2024-1546 Mozilla: Alert dialog could have been spoofed on another site CVE-2024-1547 Mozilla...

EUVD-2026-85570

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94181 Address Bar Spoof Risk; Missing Fullscreen Notification via Select Element

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

PT-2026-97533

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

Astra Linux – Vulnerability in Firefox and Thunderbird

A website could have obscured the fullscreen notification by using a dropdown select input element. This could have caused user confusion and potentially led to spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...

CVE-2026-45150

Zen Browser is a Firefox-based browser. The CVE-2026-45150 issue affects Zen prior to version 1.19.13b, where there was no persistent, clearly visible security notification when a page entered fullscreen. This could allow an attacker-controlled page to hide the real browser UI and origin informat...

CVE-2026-45150 Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing

Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information, imitate a trusted website UI, and...

CVE-2026-45150 Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing

Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information, imitate a trusted website UI, and...

PT-2026-60208

Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information, imitate a trusted website UI, and...