CVE-2023-37455

MEDIUM 5.4CVE-2023-37455 · Published 12/07/2023 · updated 17/06/2026

In short

CVE-2023-37455 is a MEDIUM (CVSS 5.4) vulnerability affecting firefox (mozilla).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 23.0% of all vulnerabilities.
Fix: update to 115 or later.

Package	Affected versions	Patched versions
firefox mozilla	`< 115`	`115`

Description

The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for iOS < 115.

References

bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
mozilla.org/security/advisories/mfsa2023-25 · Vendor Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 115

115

More vulnerabilities in firefox

See all →