CVE-2024-9391

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 131 Firefox Focus for Android versions prior to 131

Description A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible.

Recommendations For Firefox versions prior to 131, update to version 131 or later to resolve the issue. For Firefox Focus for Android versions prior to 131, update to version 131 or later to resolve the issue. As a temporary workaround, consider disabling full-screen mode on specially crafted web pages until a patch is available.