| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 135.0 | 135.0 |
| thunderbird | ≥ 131.0, < 135.0 | 135.0 |
The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free