cvedb.io
CVE-2022-31738
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2022-12-22T20:15:28.373 · Last modified 2026-06-17T04:46:10.887

Summary

When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

Affected products

mozilla — firefox

Does this affect you?

Add your gear to cvedb and we'll alert you only when mozilla ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.