PatchGap
Firefox · Core

CVE-2025-1018

Logic Error in Core
Medium firefox Logic Error

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactmoderate
DescriptionThe fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack.
ComponentCore
Bug ClassLogic Error
Tracker1910818
CISA KEVNot listed
CreditedIrvan Kurniawan
Disclosed2025-02-04

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page