CVE-2022-31738

Description

When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

References

https://www.mozilla.org/security/advisories/mfsa2022-22/

https://www.mozilla.org/security/advisories/mfsa2022-21/

https://www.mozilla.org/security/advisories/mfsa2022-20/

https://bugzilla.mozilla.org/show_bug.cgi?id=1756388

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3