CVE-2025-1018

Description

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.

References

https://www.mozilla.org/security/advisories/mfsa2025-11/

https://www.mozilla.org/security/advisories/mfsa2025-07/

https://bugzilla.mozilla.org/show_bug.cgi?id=1910818

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3