CVE-2023-29534

CriticalCVSS 9.1

Published: 19/06/2023(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.70%

50th percentile - higher than 50% of all known CVEs

Summary

In Firefox and Focus for Android, techniques were discovered to obscure the fullscreen notification, which could lead to user confusion and spoofing attacks. This affects Firefox for Android and Focus for Android versions prior to 112.

Risk Assessment

The risk includes user deception and potential phishing or spoofing attacks.

Recommendation

Update Firefox and Focus for Android to version 112 or later.

Original NVD description (English source)

Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.