CVE-2023-37204: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115.

Affected products

• Mozilla Firefox: before 115.0 (fixed in 115.0)

Published 2023-07-05. Last modified 2026-06-17.