CVE-2023-25743

HighCVSS 7.5

Published: 02/06/2023(UTC)Updated: 24/10/2026(UTC)Translated: 24/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.65%

51th percentile - higher than 51% of all known CVEs

Summary

A lack of in-app notification for entering fullscreen mode could allow a malicious website to spoof browser chrome. This bug only affects Firefox Focus; other Firefox versions are unaffected. Affects Firefox < 110 and Firefox ESR < 102.8.

Risk Assessment

May enable phishing attacks through spoofed browser interface. Risk for Firefox Focus users.

Recommendation

Update Firefox to version 110 or later and Firefox ESR to 102.8 or later.

Other vulnerabilities in Firefox Focus

See all

Original NVD description (English source)

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS