A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.

This bug only affects Firefox Focus. Other versions of Firefox are unaffected.

External Reference: https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Removing an XSLT parameter during processing could have led to an exploitable use-after-free issue. There were reports of attacks in the wild abusing this flaw.

Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx