CVE-2023-37455

MediumCVSS 5.4

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

The vulnerability involves the permission request prompt from the background tab overlaying the site in the foreground tab. This affects Firefox for iOS versions below 115.

Risk Assessment

This could lead to unauthorized access to user data, as users may inadvertently grant permissions to the background site.

Recommendation

It is recommended to update Firefox for iOS to version 115 or newer to mitigate this vulnerability.

Original NVD description (English source)

The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for iOS < 115.