CVE-2026-92033

A privilege escalation vulnerability exists in Firefox for Android , which has been resolved in Firefox 156 . According to the Mozilla security advisory (MFSA2026-90) , the flaw was reported by Steven Julian and carries a high impact rating. While the specific technical root cause is not detailed...

CVE-2023-49061

CVE-2023-49061 concerns Firefox for iOS prior to version 120, where the Reader Mode fails to neutralize HTML tags, enabling an attacker to perform HTML template injection and potentially exfiltrate user information. Affected software: Firefox for iOS

CVE-2020-12404

Summary of CVE-2020-12404 (Firefox iOS): The vulnerability arises in the native-to-JS bridge where a unique token is required to call bridging functions. The token could leak during file download, potentially enabling non-app code to access bridging functionality. Affected product: Firefox for iO...

CVE-2026-53899

Firefox for iOS is affected by an input validation vulnerability where it used partial domain matching when attaching cookies to PDF requests. This flaw allows a malicious site on a suffix domain to receive cookies belonging to the target site. The issue was addressed in Firefox for iOS 152.0 . N...

CVE-2026-74980

CVE-2026-74980 is a clickjacking vulnerability affecting the Downloads component in Firefox for Android . The vulnerability has been addressed in Firefox 154 . Documentation confirms this issue was part of a broader set of security fixes (MFSA 2026-74) and has been reported in the wild according ...

CVE-2026-16373

CVE-2026-16373 is an information disclosure vulnerability affecting the Privacy component in Firefox for Android . The issue was addressed in Firefox 153 . The vulnerability is associated with CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) and is categorized with a High base...

CVE-2026-74951

Mozilla Firefox for Android is impacted by a clickjacking vulnerability, as identified in CVE-2026-74951 . This issue was addressed in Firefox 154 . While various Linux distributions (including SUSE SLES12, SLED15, and Fedora 43/44) have reported the vulnerability in their Firefox packages, it is...

CVE-2026-81267

The Firefox for iOS browser is affected by a vulnerability where a malicious webpage can stall a popup's cross-origin navigation after a commit. This allows the address bar to display the intended destination origin while the browser continues to render content controlled by the attacker, potenti...

CVE-2026-53900

Firefox for iOS is vulnerable to an input validation error where the TemporaryDocument component preserves cookies set on an initial PDF request during cross-origin HTTP redirects. This flaw allows a malicious site to perform arbitrary cookie injection into requests directed at unrelated target d...

CVE-2026-74975

A spoofing issue exists in the Downloads component of Firefox for Android . This vulnerability is addressed in Firefox 154 . Related security advisories, such as MFSA 2026-74 , indicate that this flaw is part of a larger set of security updates for Mozilla products. While the vulnerability has be...

CVE-2026-16404

CVE-2026-16404 is a spoofing issue affecting Firefox for Android . The vulnerability was addressed in Firefox 153 . While technical details regarding the specific root cause are not extensively detailed in the provided documents beyond the nature of the spoofing issue, the vulnerability is confir...

CVE-2026-84135

CVE-2026-84135 is a denial of service vulnerability in Firefox Focus for Android , part of Mozilla Firefox. The root cause is not publicly detailed beyond "Other issue." According to Kaspersky's advisory (MFSA2026-82), it can be exploited remotely to cause denial of service. The NVD assigns a CVS...

CVE-2026-100823

The Firefox for Android browser contains a spoofing issue within its Downloads component . This vulnerability has been addressed and fixed in Firefox version 157 . No specific details regarding the underlying root cause, exploit vectors, or practical consequences beyond the spoofing nature are pr...

CVE-2026-84127

An information disclosure vulnerability exists in the WebExtensions component of Firefox for Android (versions prior to 155). This flaw allows a malicious user to obtain sensitive information from the application. The vulnerability was addressed in Firefox 155 . Public exploits for this vulnerabi...

CVE-2026-86853

A malicious webpage can repeatedly trigger external URL schemes in Firefox for iOS , leading to frequent system prompts or the launching of external applications. This behavior can result in a denial of service by making the browser temporarily unusable until the page is closed. This vulnerabilit...