CVE-2026-74980

CVE-2026-74980 is a clickjacking vulnerability affecting the Downloads component in Firefox for Android . The vulnerability has been addressed in Firefox 154 . Documentation confirms this issue was part of a broader set of security fixes (MFSA 2026-74) and has been reported in the wild according ...

CVE-2026-74980

Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74975 Spoofing issue in the Downloads component in Firefox for Android

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74975 Spoofing issue in the Downloads component in Firefox for Android

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74975 Spoofing issue in the Downloads component in Firefox for Android

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74975

A spoofing issue exists in the Downloads component of Firefox for Android . This vulnerability is addressed in Firefox 154 . Related security advisories, such as MFSA 2026-74 , indicate that this flaw is part of a larger set of security updates for Mozilla products. While the vulnerability has be...

EUVD-2026-60689

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74975

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74951 Clickjacking issue in Firefox for Android

Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74951 Clickjacking issue in Firefox for Android

Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...

EUVD-2026-60679

Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74951

Mozilla Firefox for Android is impacted by a clickjacking vulnerability, as identified in CVE-2026-74951 . This issue was addressed in Firefox 154 . While various Linux distributions (including SUSE SLES12, SLED15, and Fedora 43/44) have reported the vulnerability in their Firefox packages, it is...

CVE-2026-74951 Clickjacking issue in Firefox for Android

Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74951

Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...

poctest

Android 13 introduces many enhancements in order to harden Parc...

columba v2.2.2-beta

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

MobileWorldSafety: Benchmarking GUI Agent Safety against Environmental Injection Attacks in Android Apps

LLM-powered GUI agents that autonomously operate smartphones are rapidly transitioning from research prototypes to early real-world deployment. However, because these agents routinely process untrusted environmental content, they are highly vulnerable to environmental injection attacks, which...

CVE-2026-76046: Heap-based Buffer Overflow

Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-77326

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.169 Description An incorrect reference resolution in Core allows a remote attacker to obtain sensitive information. This is achieved by leveraging social engineering to entice a user to vis...

PT-2026-80259

Summary MobSF's Android App Link assetlinks checker validates only the manifest android:host value with valid host, but then appends the separate android:port value into the URL used for the server-side request. This bypasses the current port restriction in valid host and lets a crafted APK cause...