5.4Medium
Spoofing issue in the Downloads component in Firefox for Android
Mozilla Firefox
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.
mozilla firefox mobile vulnerabilities (CVE)
CVE records published for mozilla firefox mobile, newest first. Follow to get an email when a new one appears.
8.8High
Privilege escalation in Firefox for Android
Mozilla Firefox
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.
4.3Medium
Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS
Mozilla Firefox for iOS
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
9.8Critical
Other issue in Firefox Focus for Android
Mozilla Firefox
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
4.3Medium
Information disclosure in the WebExtensions component in Firefox for Android
Mozilla Firefox
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
8.8High
Privilege escalation in Firefox for Android
Mozilla Firefox
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
5.4Medium
Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS
Mozilla Firefox for iOS
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
6.5Medium
Clickjacking issue in the Downloads component in Firefox for Android
Mozilla Firefox
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
5.4Medium
Spoofing issue in the Downloads component in Firefox for Android
Mozilla Firefox
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
6.5Medium
Clickjacking issue in Firefox for Android
Mozilla Firefox
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
7.4High
Spoofing issue in Firefox for Android
Mozilla Firefox
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
7.5High
Information disclosure in the Privacy component in Firefox for Android
Mozilla Firefox
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.
5.3Medium
Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS
Mozilla Firefox for iOS
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.
4.3Medium
Cookie injection was possible when opening a PDF link
Mozilla Firefox for iOS
Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefo…
6.5Medium
Cross-origin cookies could be leaked when opening a PDF link
Mozilla Firefox for iOS
Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. This vulnerability was fixed in Firefox for iOS 152.0.
9.6Critical
CVE-2022-26486
KEV
Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox; Mozilla Firefox ESR; Mozilla Firefox for Android; Mozilla Thunderbird
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Andro…
2.4%EPSS
8.8High
CVE-2022-26485
KEV
Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox; Mozilla Firefox ESR; Mozilla Firefox for Android; Mozilla Thunderbird
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thund…
14%EPSS