| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 135.0 | 135.0 |
| thunderbird | ≥ 131.0, < 135.0 | 135.0 |
The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free