CVE-2025-1018

Katalog CVE

CVSS 5.3 · Medium EPSS 0,42%

Kerentanan Improper Restriction of Rendered UI Layers or Frames pada mozilla firefox, mozilla thunderbird. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

Rincian

Terbit di NVD

4 Februari 2025

Terakhir diubah

5 Oktober 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mozilla.org/security/advisories/mfsa2025-07/ advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2025-11/ advisory vendor
• https://bugzilla.mozilla.org/show_bug.cgi?id=1910818 permissions required