description: While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. Side-channel attacks on the text by using specially crafted fonts could have lead to this text being inferred by the webpage. This vulnerability affects Firefox < 98.
problem types: Autofill Text could be exfiltrated via side-channel attacks
affected:
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 98, status: affected, versionType: custom
}