Unscored
Frame poisoning in the Layout component
Mozilla Firefox
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
5.4Medium
CVE-2026-74975Spoofing issue in the Downloads component in Firefox for Android
Description
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
Weakness (CWE):
CWE-451
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Mozilla | Firefox | — | |
| mozilla | firefox mobile | < 154.0 |
References and patches
- https://bugzilla.mozilla.org/show_bug.cgi?id=1842361 Issue Tracking
- https://www.mozilla.org/security/advisories/mfsa2026-74/ Vendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:android:*:*< 154.0