← Database

CVE-2025-1019

MEDIUM CVSS: 4.3 Published: 2025-02-04 Modified: 2026-06-17

Description

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

CWE-1021, CWE-1021

References