medium4.3
CVE-2022-46877
By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks.
Impact
By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 108.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 108.0 |
| Debian | Debian Linux | Versions 10.0, 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.mozilla.org/show_bug.cgi?id=1795139
- https://lists.debian.org/debian-lts-announce/2023/01/msg00015.html
- https://lists.debian.org/debian-lts-announce/2023/02/msg00018.html
- https://security.gentoo.org/glsa/202305-06
- https://security.gentoo.org/glsa/202305-13
- https://www.debian.org/security/2023/dsa-5322
- https://www.debian.org/security/2023/dsa-5355
- https://www.mozilla.org/security/advisories/mfsa2022-51/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1795139
- https://lists.debian.org/debian-lts-announce/2023/01/msg00015.html
- https://lists.debian.org/debian-lts-announce/2023/02/msg00018.html
- https://security.gentoo.org/glsa/202305-06
- https://security.gentoo.org/glsa/202305-13
- https://www.debian.org/security/2023/dsa-5322
- https://www.debian.org/security/2023/dsa-5355
- https://www.mozilla.org/security/advisories/mfsa2022-51/