CVE-2024-4766

2024-05-1400:00:00

ubuntu.com

firefox

android

fullscreen notification

spoofing

user confusion

potential attacks

vulnerability

cve-2024-4766

mozjs

spidermonkey

javascript engine

AI Score

Confidence

Low

EPSS

Percentile

15.5%

JSON

Different techniques existed to obscure the fullscreen notification in
Firefox for Android. These could have lead to potential user confusion and
spoofing attacks. This bug only affects Firefox for Android. Other
versions of Firefox are unaffected. This vulnerability affects Firefox <
126.

Notes

Author	Note
tyhicks	mozjs contains a copy of the SpiderMonkey JavaScript engine
mdeslaur	starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap starting with Ubuntu 24.04, the thunderbird package is just a script that installs the Thunderbird snap