Hafiizh

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button

The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to app

A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115.

Red Hat Security Advisory: firefox security update

Red Hat Security Advisory: thunderbird security update

Red Hat Security Advisory: firefox security update

Red Hat Security Advisory: thunderbird security update

Red Hat Security Advisory: thunderbird security update

Red Hat Security Advisory: firefox security update

Red Hat Security Advisory: thunderbird security update