CVE-2025-1019: Fullscreen notification not properly displayed
Published Feb 4, 2025
·Updated
Last updated 11 February 2025
Other sources
The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack.
— Mozilla
Affected Software
5 affected componentsFixes available
debian/firefox
135.0-1
Mozilla Firefox<135.0
Mozilla Thunderbird>=131.0<135.0
Mozilla Firefox<135
135
Mozilla Thunderbird<135
135
Event History
Feb 4, 2025
CVE Published
via Mozilla·12:00 AM
CVE Published
via MITRE·01:58 PM
Data Sourced
via MITRE·01:58 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 11, 2025
Data Sourced
via Ubuntu·05:04 AM
RemedyDescriptionSeverityAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2025-1019?
CVE-2025-1019 has a medium severity rating due to its potential to enable spoofing attacks.
2
How can I mitigate CVE-2025-1019?
To mitigate CVE-2025-1019, users should upgrade to the latest version of Mozilla Thunderbird or Firefox beyond version 135.
3
What does CVE-2025-1019 exploit?
CVE-2025-1019 exploits the manipulation of the z-order of browser windows to hide fullscreen notifications.
4
Who is affected by CVE-2025-1019?
CVE-2025-1019 affects users of Mozilla Thunderbird and Mozilla Firefox versions prior to 135.
5
Can CVE-2025-1019 lead to any security breaches?
Yes, CVE-2025-1019 can potentially lead to security breaches through spoofing attacks.