CVE-2025-1019 — Fullscreen notification not properly displayed
The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability…
Published: 2025-02-04 · CVSS: 4.3 · CVSS 3.1
The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7