4 matches found
CVE-2025-1939
Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136...
CVE-2025-1939
The Firefox web browser (versions prior to 136 ) is vulnerable to a tapjacking flaw within the Custom Tabs feature. The issue stems from transition animations that could be manipulated to hide the actual UI elements being clicked, potentially tricking users into granting sensitive permissions . T...
CVE-2025-1939: Exposure of Private Personal Information to an Unauthorized Actor
Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136...
Malicious code in hw-transition-animation (npm)
The package hw-transition-animation npm version 66.6.9 contains malicious code. The malicious code is designed exfiltrate system information potentially for malicious purpose...