Threat Investigation
Request a demo

CVE-2024-8388

Medium

Description

Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121. This could lead to spoofing the browser UI if the sudden appearance of the prompt distracted the user from noticing the visual transition happening behind the prompt. These notifications now use the Android Toast feature. *This bug only affects Firefox on Android. Other operating systems are unaffected.* This vulnerability affects Firefox < 130.

SeverityMedium
CVSS5.3
Exploit probability—
ProductMozilla Firefox
PublishedSep 3, 2024
First seenSep 3, 2024
Weakness typeCWE-1021CWE-1021

How to fix

Update
  • mozilla firefox130.0 or later

Affected products

ProductAffected versionsFixed in
mozilla firefoxv < 130.0130.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.