CVE-2023-28159: Medium severity firefox vulnerability

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2023-28159.

Q: What is the affected software?

The affected software is Mozilla Firefox version up to and excluding 111 for Firefox for Android.

Q: What is the severity of CVE-2023-28159?

CVE-2023-28159 has a severity level of high.

Q: How does this vulnerability impact users?

This vulnerability could result in potential user confusion or spoofing attacks on Firefox for Android.

Q: How can I fix CVE-2023-28159?

To fix CVE-2023-28159, update Firefox for Android to version 111 or later.

Published Mar 14, 2023

Updated

The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. <br>This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 111.

Other sources

The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.

Affected Software

3 affected componentsFixes available

Mozilla Firefox<111

111

Mozilla Firefox<111.0

Mozilla Firefox Android<111.0

Event History

Mar 14, 2023

CVE Published

12:00 AM

Jun 2, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

05:15 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

MFSA2023-09

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID for this issue?