CVE-2023-29534 — CRITICAL (9.1)

Q: How severe is CVE-2023-29534?

CVE-2023-29534 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2023-29534?

Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Firefox Focus.

Vulnerability Description

Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Mozilla	Firefox	< 112.0
Mozilla	Firefox Focus	< 112.0

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1816007Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1816059Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1821155Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1821576Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1821906Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1822298Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1822305Permissions Required
https://www.mozilla.org/security/advisories/mfsa2023-13/Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1816007Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1816059Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1821155Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1821576Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1821906Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1822298Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1822305Permissions Required

FAQ

What is CVE-2023-29534?

CVE-2023-29534 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Fi...

How severe is CVE-2023-29534?

CVE-2023-29534 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-29534?

Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Firefox Focus.