3 matches found
CVE-2022-45404
Through a series of popup and window.print calls, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...
Mozilla: Fullscreen notification bypass
The Mozilla Foundation Security Advisory describes this flaw as: Through a series of popup and window.print calls, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in potential user confusion or spoofing attacks...
PT-2022-5488
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 102.5 Thunderbird versions prior to 102.5 Firefox versions prior to 107 Description The issue is related to errors in presenting information to the user interface, allowing an attacker to conduct spoofing attacks...