3896 matches found
CVE-2026-74951 Clickjacking issue in Firefox for Android
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...
CVE-2026-74951
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...
CVE-2026-74951 Clickjacking issue in Firefox for Android
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...
PT-2026-77011
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description A clickjacking issue exists in the Widget component. Clickjacking is a technique where an...
PT-2026-76984
Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 154 Description Clickjacking issue in Firefox for Android. Clickjacking is a technique where an attacker uses multiple transparent or semi-transparent layers to trick a user into clicking on a button or li...
PT-2026-77013
Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 154 Description A clickjacking issue exists in the Downloads component. Clickjacking is a technique where an attacker uses multiple transparent or semi-transparent layers to trick a user into clicking on a...
Astra Linux – Vulnerability in Firefox and Thunderbird
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
Astra Linux – Vulnerability in Firefox
Widget-related Clickjacking issue with the Gtk component. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...
Improper Restriction of Rendered UI Layers or Frames
Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames in the handling of cross-origin iframes, which allows the native...
GHSA-X8RC-WPG4-GRPF Electron: Cross-origin iframe can position native autofill popup
Impact The native autofill popup could be positioned by a cross-origin iframe outside that iframe's bounds, over the embedding page's UI, enabling clickjacking or spoofing of trusted UI. Apps are only affected if they embed untrusted content in iframes within windows that also display trusted UI...
Improper Restriction of Rendered UI Layers or Frames
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames in the handling of cross-origin iframes, which allows...
Electron: Cross-origin iframe can position native autofill popup
Impact The native autofill popup could be positioned by a cross-origin iframe outside that iframe's bounds, over the embedding page's UI, enabling clickjacking or spoofing of trusted UI. Apps are only affected if they embed untrusted content in iframes within windows that also display trusted UI...
CVE-2026-70600
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill popup could be positioned by a cross-origin iframe outside that iframe's bounds, over the embedding page's UI, enabling...
CVE-2026-70600
CVE-2026-70600 affects Electron: prior to versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3 the native autofill popup could be positioned by a cross-origin iframe outside that iframe’s bounds, over the embedding page’s UI. This could enable clickjacking or spoofing of trusted UI when apps embed ...
CVE-2026-70600 Electron: Cross-origin iframe can position native autofill popup
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill popup could be positioned by a cross-origin iframe outside that iframe's bounds, over the embedding page's UI, enabling...
CVE-2026-16397
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in the WebExtensions component in Firefox for Android...
Linux Distros Unpatched Vulnerability : CVE-2026-16397
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153. CVE-2026-16397 Note that Nessus relies on...
Updated transmission packages fix a security vulnerability
The updated packages fix a security vulnerability: Transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths. CVE-2026-38978...
