Mozilla: Fullscreen Notification could have been hidden by select element
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Mozilla | Firefox | affected |
|
||||||
| Mozilla | Firefox ESR | affected |
|
||||||
| Mozilla | Thunderbird | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | |||
| thunderbird-0:115.8.0-1.el7_9 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2024:0957 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el7_9 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2024:0976 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8 | |||
| firefox-0:115.8.0-1.el8_9 | cpe:/a:redhat:enterprise_linux:8 | RHSA-2024:0955 | 2024-02-26T00:00:00Z |
| thunderbird-0:115.8.0-1.el8_9 | cpe:/a:redhat:enterprise_linux:8 | RHSA-2024:0964 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | |||
| thunderbird-0:115.8.0-1.el8_2 | cpe:/a:redhat:rhel_aus:8.2 | RHSA-2024:0958 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el8_2 | cpe:/a:redhat:rhel_aus:8.2 | RHSA-2024:0972 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service | |||
| thunderbird-0:115.8.0-1.el8_2 | cpe:/a:redhat:rhel_tus:8.2 | RHSA-2024:0958 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el8_2 | cpe:/a:redhat:rhel_tus:8.2 | RHSA-2024:0972 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | |||
| thunderbird-0:115.8.0-1.el8_2 | cpe:/a:redhat:rhel_e4s:8.2 | RHSA-2024:0958 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el8_2 | cpe:/a:redhat:rhel_e4s:8.2 | RHSA-2024:0972 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | |||
| thunderbird-0:115.8.0-1.el8_4 | cpe:/a:redhat:rhel_aus:8.4 | RHSA-2024:0959 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el8_4 | cpe:/a:redhat:rhel_aus:8.4 | RHSA-2024:0971 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | |||
| thunderbird-0:115.8.0-1.el8_4 | cpe:/a:redhat:rhel_tus:8.4 | RHSA-2024:0959 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el8_4 | cpe:/a:redhat:rhel_tus:8.4 | RHSA-2024:0971 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | |||
| thunderbird-0:115.8.0-1.el8_4 | cpe:/a:redhat:rhel_e4s:8.4 | RHSA-2024:0959 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el8_4 | cpe:/a:redhat:rhel_e4s:8.4 | RHSA-2024:0971 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8.6 Extended Update Support | |||
| thunderbird-0:115.8.0-1.el8_6 | cpe:/a:redhat:rhel_eus:8.6 | RHSA-2024:0960 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el8_6 | cpe:/a:redhat:rhel_eus:8.6 | RHSA-2024:0970 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 8.8 Extended Update Support | |||
| thunderbird-0:115.8.0-1.el8_8 | cpe:/a:redhat:rhel_eus:8.8 | RHSA-2024:0961 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el8_8 | cpe:/a:redhat:rhel_eus:8.8 | RHSA-2024:0969 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 9 | |||
| firefox-0:115.8.0-1.el9_3 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2024:0952 | 2024-02-22T00:00:00Z |
| thunderbird-0:115.8.0-1.el9_3 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2024:0963 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 9.0 Extended Update Support | |||
| thunderbird-0:115.8.0-1.el9_0 | cpe:/a:redhat:rhel_eus:9.0 | RHSA-2024:0962 | 2024-02-26T00:00:00Z |
| firefox-0:115.8.0-1.el9_0 | cpe:/a:redhat:rhel_eus:9.0 | RHSA-2024:0968 | 2024-02-26T00:00:00Z |
| Red Hat Enterprise Linux 9.2 Extended Update Support | |||
| firefox-0:115.8.0-1.el9_2 | cpe:/a:redhat:rhel_eus:9.2 | RHSA-2024:0983 | 2024-02-26T00:00:00Z |
| thunderbird-0:115.8.0-1.el9_2 | cpe:/a:redhat:rhel_eus:9.2 | RHSA-2024:0984 | 2024-02-26T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3747-1 | firefox-esr security update |
Debian DLA |
DLA-3748-1 | thunderbird security update |
Debian DSA |
DSA-5627-1 | firefox-esr security update |
Debian DSA |
DSA-5630-1 | thunderbird security update |
EUVD |
EUVD-2024-17295 | A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8. |
Ubuntu USN |
USN-6649-1 | Firefox vulnerabilities |
Ubuntu USN |
USN-6669-1 | Thunderbird vulnerabilities |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.945% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Debian
Debian debian Linux Mozilla Mozilla firefox Mozilla thunderbird |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Debian
Debian debian Linux Mozilla Mozilla firefox Mozilla thunderbird |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
ssvc
|