CVE-2023-25748

By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111.

• CWE-1021

• https://bugzilla.mozilla.org/show_bug.cgi?id=1798798Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-09/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1798798Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-09/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1798798Issue Tracking, Permissions Required, Vendor Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25742When importing a SPKI RSA public key as ECDSA P-256, the key…6.5
• CVE-2023-25743A lack of in app notification for entering fullscreen mode c…7.5
• CVE-2023-25744Mmemory safety bugs present in Firefox 109 and Firefox ESR 1…8.8
• CVE-2023-25745Memory safety bugs present in Firefox 109. Some of these bug…8.8
• CVE-2023-25746Memory safety bugs present in Firefox ESR 102.7. Some of the…8.8
• CVE-2023-25747A potential use-after-free in libaudio was fixed by disablin…7.5
• CVE-2023-25749Android applications with unpatched vulnerabilities can be l…4.3
• CVE-2023-2575Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 …8.8
• CVE-2023-25750Under certain circumstances, a ServiceWorker's offline cache…4.3
• CVE-2023-25751Sometimes, when invalidating JIT code while following an ite…6.5
• CVE-2023-25752When accessing throttled streams, the count of available byt…6.5
• CVE-2023-25753 There exists an SSRF (Server-Side Request Forgery) vulnerab…6.5