CVE-2020-26953 affects multiple packages. It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. See references for individual vulnerability details.