Lucene search
Veracode Vulnerability DatabaseVERACODE:45574HistoryFeb 22, 2024 - 3:43 a.m.
Fullscreen Notification Obscuring
2024-02-2203:43:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
vulnerability
firefox
thunderbird
fullscreen
notification
obscuring
website
dropdown
input
user confusion
spoofing
attacks
Firefox and Thunderbird are vulnerable to Fullscreen Notification Obscuring. The vulnerability is due to a website being able to obscure the fullscreen notification by using a dropdown select input element. This could lead to user confusion and possible spoofing attacks in Firefox and Thunderbird.
References
bugzilla.mozilla.org/show_bug.cgi?id=1832627
lists.debian.org/debian-lts-announce/2024/03/msg00000.html
lists.debian.org/debian-lts-announce/2024/03/msg00001.html
security-tracker.debian.org/tracker/CVE-2024-1548
www.mozilla.org/security/advisories/mfsa2024-05/
www.mozilla.org/security/advisories/mfsa2024-06/
www.mozilla.org/security/advisories/mfsa2024-07/
Related
prion
prion
Design/Logic Flaw
2024-02-20 14:15:00
redhatcve
redhatcve
CVE-2024-1548
2024-02-21 16:36:55
cgr
cgr
CVE-2024-1548 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2024-1548
2024-02-20 00:00:00
cvelist
cvelist
CVE-2024-1548
2024-02-20 13:21:34
cve
cve
CVE-2024-1548
2024-02-20 14:15:08
alpinelinux
alpinelinux
CVE-2024-1548
2024-02-20 14:15:08
debiancve
debiancve
CVE-2024-1548
2024-02-20 14:15:08
nvd
nvd
CVE-2024-1548
2024-02-20 14:15:08
openvas
openvas
Mozilla Firefox ESR Security Update (mfsa_2024-05_2024-07) - Mac OS X
2024-02-21 00:00:00
Mozilla Thunderbird Security Update (mfsa_2023-53_2023-56) - Windows
2024-02-21 00:00:00
Mozilla Firefox ESR Security Update (mfsa_2024-05_2024-07) - Windows
2024-02-21 00:00:00
amazon
amazon
Important: thunderbird
2024-02-29 10:03:00
nessus
nessus
Amazon Linux 2 : thunderbird (ALAS-2024-2477)
2024-03-05 00:00:00
Amazon Linux 2 : firefox (ALASFIREFOX-2024-022)
2024-03-06 00:00:00
SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2024:0580-1)
2024-02-22 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2024-02-21 20:04:41
[slackware-security] mozilla-firefox
2024-02-20 18:47:43
osv
osv
thunderbird - security update
2024-02-23 00:00:00
Important: thunderbird security update
2024-02-26 00:00:00
firefox-esr - security update
2024-03-04 00:00:00
redhat
redhat
(RHSA-2024:0958) Important: thunderbird security update
2024-02-26 00:56:06
(RHSA-2024:0983) Important: firefox security update
2024-02-26 09:32:28
(RHSA-2024:0955) Important: firefox security update
2024-02-26 00:09:09
almalinux
almalinux
Important: firefox security update
2024-02-26 00:00:00
Important: thunderbird security update
2024-02-26 00:00:00
Important: firefox security update
2024-02-22 00:00:00
debian
debian
[SECURITY] [DSA 5630-1] thunderbird security update
2024-02-23 18:00:41
[SECURITY] [DLA 3748-1] thunderbird security update
2024-03-04 07:54:14
[SECURITY] [DSA 5627-1] firefox-esr security update
2024-02-21 17:26:21
rocky
rocky
firefox security update
2024-03-12 15:41:47
kaspersky
kaspersky
KLA64090 Multiple vulnerabilities in Mozilla Thunderbird
2024-02-20 00:00:00
KLA64089 Multiple vulnerabilities in Mozilla Firefox ESR
2024-02-20 00:00:00
KLA64088 Multiple vulnerabilities in Mozilla Firefox
2024-02-20 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2024-02-27 00:00:00
thunderbird security update
2024-02-26 00:00:00
thunderbird security update
2024-02-27 00:00:00
centos
centos
thunderbird security update
2024-02-29 15:09:00
firefox security update
2024-02-29 15:08:24
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-02-27 04:21:38
Updated rootcerts, nss and firefox packages fix security vulnerabilities
2024-02-27 04:08:24
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.8 — Mozilla
2024-02-20 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.8 — Mozilla
2024-02-20 00:00:00
Security Vulnerabilities fixed in Firefox 123 — Mozilla
2024-02-20 00:00:00
ubuntu
ubuntu
Firefox regressions
2024-03-06 00:00:00
Firefox vulnerabilities
2024-02-22 00:00:00
Thunderbird vulnerabilities
2024-03-04 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-05-05 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2024-05-12 00:00:00