Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-1018

Fullscreen notification is not displayed when fullscreen is re-requested

Description

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • 135 to ≤ *unaffected

Mozilla Thunderbird

  • 135 to ≤ *unaffected

References