← Database

CVE-2025-1018

MEDIUM CVSS: 5.3 Published: 2025-02-04 Modified: 2026-06-17

Description

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

CWE-1021, CWE-1021

References