CVE-2025-1019

Publication date

2025-02-04 13:58:54

Family

mozilla

State

PUBLISHED

Description

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability affects Firefox < 135 and Thunderbird < 135.