CVE-2024-6605

Firefox Android versions prior to 128 are vulnerable to a security flaw where the browser allowed immediate interaction with permission prompts. This flaw could be exploited by malicious websites to perform tapjacking attacks. No specific exploit links or technical remediation steps are provided ...

CVE-2024-6605

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox 128...

CVE-2024-6605

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox 128...

CVE-2024-6605 Firefox Android missed activation delay to prevent tapjacking

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox 128...

CVE-2024-6605 Firefox Android missed activation delay to prevent tapjacking

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox 128...

CVE-2024-6605: Insecure Inherited Permissions

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox 128...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates in the onCreate method of the multiple files file, which can be exploited to trick a user into granting health privileges via tapjacking. A...

PT-2024-23969 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a possible way to trick the user into granting health permissions due to tapjacking in the onCreate method of multiple files. This...

PT-2024-37748

Name of the Vulnerable Software and Affected Versions Firefox Android versions prior to 128 Description The issue allows for immediate interaction with permission prompts, which could be used for tapjacking. Recommendations For versions prior to 128, update to version 128 or later to resolve the...

CVE-2024-31324: Improper Restriction of Rendered UI Layers or Frames

In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed...

CVE-2024-31323: Improper Restriction of Rendered UI Layers or Frames

In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Security Vulnerabilities fixed in Firefox 128 — Mozilla

An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. Clipboard code...

Mozilla Firefox < 128.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 128.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-29 advisory. - When almost out-of-memory an elliptic curve key which was never allocated could have been freed again...

CVE-2023-42011 IBM Sterling B2B Integrator Standard Edition tapjacking

IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. IBM X-Force ID: 265508...

CVE-2023-42011

CVE-2023-42011 affects IBM Sterling B2B Integrator Standard Edition versions 6.1 and 6.2. The vulnerability arises because frame objects or UI layers can belong to another application or domain, potentially leading to user confusion about the active interface (tapjacking-like framing issue). The ...

CVE-2023-42011 IBM Sterling B2B Integrator Standard Edition tapjacking

IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. IBM X-Force ID: 265508...

PT-2024-23970

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to bypassing tapjacking/overlay protection in Android. It involves launching an activity in portrait mode first and then rotating it to landscape mode. This could lead to...

ASB-A-302431573

In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed...

ASB-A-313425281

In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-0654

Due to a misconfiguration, the WARP Mobile Client 6.29 for Android was susceptible to a tapjacking attack. In the event that an attacker built a malicious application and managed to install it on a victim's device, the attacker would be able to trick the user into believing that the app shown on...