CVE-2022-46877

By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 108.

Published: Dec 22, 2022
Updated: Apr 14, 2023
CVE: CVE-2022-46877
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.3
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mozilla / firefox	-	108.0
debian / debian_linux	10.0	10.0.x
debian / debian_linux	11.0	11.0.x

https://bugzilla.mozilla.org/show_bug.cgi?id=1795139
https://lists.debian.org/debian-lts-announce/2023/01/msg00015.html
https://lists.debian.org/debian-lts-announce/2023/02/msg00018.html
https://security.gentoo.org/glsa/202305-06
https://security.gentoo.org/glsa/202305-13
https://www.debian.org/security/2023/dsa-5322
https://www.debian.org/security/2023/dsa-5355
https://www.mozilla.org/security/advisories/mfsa2022-51/

Vulnerability Database

CVE-2022-46877