CVE-2025-1019

Summary

CVE-2025-1019 is a vulnerability that allows an attacker to manipulate the z-order of browser windows in Firefox and Thunderbird versions below 135. By hiding the fullscreen notification, an attacker could potentially carry out a spoofing attack, deceiving users into believing they are interacting with a trusted source. This issue could pose a significant security risk if exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.