description: When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
problem types: Browser window spoof using fullscreen mode
affected:
{
vendor: Mozilla
product: Firefox ESR
versions:
version: unspecified, lessThan: 91.5, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 96, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 91.5, status: affected, versionType: custom
}
