Kazuki Nomoto

**Name of the Vulnerable Software and Affected Versions** Firefox for iOS versions prior to 115 **Description** The issue is related to the permission request prompt from a site in a background tab being overlaid on top of the site in the foreground tab. This can allow a remote attacker to perform a spoofing attack due to insufficient warning about potentially dangerous actions. **Recommendations** For Firefox for iOS versions prior to 115, update to version 115 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox for Android versions prior to 109 **Description** The issue arises from the way per origin notification permissions were stored, failing to account for the browsing context in which the permission was granted. This could lead to notifications being displayed during different browsing sessions. The problem is specific to Firefox for Android, with other operating systems being unaffected. **Recommendations** For Firefox for Android versions prior to 109, update to version 109 or later to resolve the issue. As a temporary workaround, consider restricting notification permissions to minimize the risk of unauthorized access.