CoreCVE
Back

MEDIUM

Full screen notification obscured by external program

Published Aug 1, 2023

Description

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2.

Affected products

Remediation

Red Hat statement

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Weaknesses (2)

CWE-290

Authentication Bypass by Spoofing

CWE-59

References (10)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mozilla
Published Aug 1, 2023
Updated Dec 18, 2025
Reserved Aug 1, 2023
Link CVE-2023-4053

CISA Vulnrichment

Updated Oct 22, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-4053

Red Hat

Severity Moderate
Public date Aug 29, 2023
Bugzilla 2236078
Link CVE-2023-4053

ENISA EUVD

Assigner mozilla
Published Aug 1, 2023
Updated Dec 18, 2025
Link EUVD-2023-53944

GitHub

No data