Rifai Rejal Maynando

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 141 Description: A crafted URL utilizing a blob: URI could conceal the actual origin of the page, potentially leading to a spoofing attack. This issue specifically impacted Android operating systems. Recommendations: Update Firefox to version 141 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7 macOS versions prior to 14.7 macOS versions prior to 15 **Description** This issue was addressed through improved state management. Visiting a malicious website may lead to user interface spoofing. **Recommendations** For macOS versions prior to 13.7, update to macOS Ventura 13.7 to resolve the issue. For macOS versions prior to 14.7, update to macOS Sonoma 14.7 to resolve the issue. For macOS versions prior to 15, update to macOS Sequoia 15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 130 **Description** The issue is related to the notification announcing the transition to fullscreen mode in Firefox on Android. Multiple prompts and panels from both Firefox and the Android OS could be used to obscure this notification, potentially leading to spoofing of the browser UI if the user is distracted by the sudden appearance of a prompt. The notifications now use the Android Toast feature. This issue only affects Firefox on Android, with other operating systems being unaffected. **Recommendations** For versions prior to 130, update to Firefox version 130 or later to resolve the issue. As a temporary workaround, consider being cautious when multiple prompts appear, ensuring to notice any visual transitions to fullscreen mode. Restricting the use of fullscreen mode until the update can also minimize the risk of exploitation.