PatchGap
Firefox · Core

CVE-2025-1018

Spoofing in Core
Medium CVSS 5.3 firefox Spoofing

Overview

Medium
Severity
5.3
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactmoderate
DescriptionThe fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack.
ComponentCore
Bug ClassSpoofing
Tracker1910818
CWECWE-1021
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CISA KEVNot listed
CreditedIrvan Kurniawan
Disclosed2025-02-04

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page