CVE-2024-4766

2024-05-1418:15:13

mozilla

web.nvd.nist.gov

firefox

android

fullscreen notification

spoofing

vulnerability

cve-2024-4766

nvd

AI Score

5.9

Confidence

Low

EPSS

Percentile

15.5%

JSON

Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have lead to potential user confusion and spoofing attacks.
This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 126.

Affected configurations

Vulners

Node

mozillafirefoxRange≤126

VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "126",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]