Mozilla Firefox Mobile vulnerabilities

• mozilla firefox, firefox mobile +1 more Spoofing issue in the Downloads component in Firefox for Android CVE-2026-100823 5.4 MediumSeptember 29, 2026
• mozilla firefox, firefox mobile +1 more Privilege escalation in Firefox for Android CVE-2026-92033 8.8 HighSeptember 15, 2026
• mozilla firefox for ios, firefox mobile +1 more Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS CVE-2026-86853 4.3 MediumSeptember 8, 2026
• mozilla firefox, firefox mobile +1 more Other issue in Firefox Focus for Android CVE-2026-84135 9.8 CriticalSeptember 1, 2026
• mozilla firefox, firefox mobile +1 more Information disclosure in the WebExtensions component in Firefox for Android CVE-2026-84127 4.3 MediumSeptember 1, 2026
• mozilla firefox, firefox mobile +1 more Privilege escalation in Firefox for Android CVE-2026-84117 8.8 HighSeptember 1, 2026
• mozilla firefox for ios, firefox mobile +1 more Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS CVE-2026-81267 5.4 MediumAugust 31, 2026
• mozilla firefox, firefox mobile +1 more Clickjacking issue in the Downloads component in Firefox for Android CVE-2026-74980 6.5 MediumAugust 18, 2026
• mozilla firefox, firefox mobile +1 more Spoofing issue in the Downloads component in Firefox for Android CVE-2026-74975 5.4 MediumAugust 18, 2026
• mozilla firefox, firefox mobile +1 more Clickjacking issue in Firefox for Android CVE-2026-74951 6.5 MediumAugust 18, 2026
• mozilla firefox, firefox mobile +1 more Spoofing issue in Firefox for Android CVE-2026-16404 7.4 HighJuly 21, 2026
• mozilla firefox, firefox mobile +1 more Information disclosure in the Privacy component in Firefox for Android CVE-2026-16373 7.5 HighJuly 21, 2026
• mozilla firefox for ios, firefox mobile +1 more Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS CVE-2026-14906 5.3 MediumJuly 13, 2026
• mozilla firefox for ios, firefox mobile +1 more Cookie injection was possible when opening a PDF link CVE-2026-53900 4.3 MediumJune 16, 2026
• mozilla firefox for ios, firefox mobile +1 more Cross-origin cookies could be leaked when opening a PDF link CVE-2026-53899 6.5 MediumJune 16, 2026
• mozilla firefox for ios, firefox mobile +1 more Long pressing on a download link could potentially allow Javascript commands to be executed... CVE-2024-43111 6.1 MediumAugust 6, 2024
• mozilla firefox for ios, firefox mobile +1 more The contextual menu for links could provide an opportunity for cross-site scripting attacks This... CVE-2024-43113 6.1 MediumAugust 6, 2024
• mozilla firefox for ios, firefox mobile +1 more Long pressing on a download link could potentially provide a means for cross-site scripting This... CVE-2024-43112 6.1 MediumAugust 6, 2024
• mozilla firefox, firefox mobile +1 more A select option could partially obscure security prompts. This could be used by a malicious site... CVE-2024-7523 Fix available 8.1 HighAugust 6, 2024
• mozilla firefox for ios, firefox mobile +1 more In certain scenarios a malicious website could attempt to display a fake location URL bar which... CVE-2024-38313 4.3 MediumJune 13, 2024
• mozilla firefox for ios, firefox mobile +1 more When browsing private tabs, some data related to location history or webpage thumbnails could be... CVE-2024-38312 6.5 MediumJune 13, 2024
• mozilla firefox for ios, firefox mobile +1 more When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before... CVE-2024-0953 6.1 MediumFebruary 5, 2024
• mozilla firefox for ios, firefox mobile +1 more An attacker could have performed HTML template injection via Reader Mode and exfiltrated user... CVE-2023-49061 6.1 MediumNovember 21, 2023
• mozilla firefox for ios, firefox mobile +1 more An attacker could have accessed internal pages or data by ex-filtrating a security key from... CVE-2023-49060 9.8 CriticalNovember 21, 2023
• mozilla firefox for ios, firefox mobile +1 more When opening a page in reader mode, the redirect URL could have caused attacker-controlled script... CVE-2023-5758 6.1 MediumOctober 24, 2023
• mozilla firefox for android, focus for android, firefox focus +1 more +3 more When recording the screen while in Private Browsing on Firefox for Android the address bar and... CVE-2023-29546 6.5 MediumJune 19, 2023
• mozilla firefox for android, focus for android, firefox focus +1 more +3 more Different techniques existed to obscure the fullscreen notification in Firefox and Focus for... CVE-2023-29534 9.1 CriticalJune 19, 2023
• mozilla firefox for android, firefox mobile +1 more A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on... CVE-2023-25747 7.5 HighJune 19, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Mozilla developers Randell Jesup, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team... CVE-2023-29551 Fix available 8.8 HighApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Under certain circumstances, a call to the <code>bind</code> function may have resulted in the... CVE-2023-29549 Fix available 6.5 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more If multiple instances of resource exhaustion occurred at the incorrect time, the garbage... CVE-2023-29544 Fix available 6.5 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more An attacker could have caused memory corruption and a potentially exploitable use-after-free of a... CVE-2023-29543 Fix available 8.8 HighApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to... CVE-2023-29540 Fix available 6.1 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI... CVE-2023-29538 Fix available 4.3 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Multiple race conditions in the font initialization could have led to memory corruption and... CVE-2023-29537 Fix available 7.5 HighApril 12, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more Mozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the... CVE-2023-29550 Fix available 8.8 HighApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.... CVE-2023-29548 Fix available 6.5 MediumApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be... CVE-2023-29541 Fix available 8.8 HighApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more When handling the filename directive in the Content-Disposition header, the filename would be... CVE-2023-29539 Fix available 8.8 HighApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker... CVE-2023-29536 Fix available 8.8 HighApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more Following a Garbage Collector compaction, weak maps may have been accessed before they were... CVE-2023-29535 Fix available 6.5 MediumApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more A website could have obscured the fullscreen notification by using a combination of <code>window... CVE-2023-29533 Fix available 4.3 MediumApril 11, 2023
• mozilla firefox for ios, firefox mobile +1 more Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being... CVE-2019-17003 6.1 MediumFebruary 16, 2023
• mozilla firefox, firefox mobile +1 more A website that had permission to access the microphone could record audio without the audio... CVE-2022-38474 4.3 MediumDecember 22, 2022
• mozilla firefox for ios, firefox mobile +1 more Internal URLs are protected by a secret UUID key, which could have been leaked to web page... CVE-2022-31746 6.5 MediumDecember 22, 2022
• mozilla firefox, firefox esr, firefox for android +4 more +6 more An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable... CVE-2022-26486 In KEVFix available 9.6 CriticalMarch 6, 2022
• mozilla firefox, firefox esr, firefox for android +4 more +6 more Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We... CVE-2022-26485 In KEVPublic exploitFix available EPSS 14.3% 8.8 HighMarch 6, 2022
• mozilla firefox, firefox mobile +1 more Firefox for Android allowed navigations through the `intent://` protocol, which could be used to... CVE-2021-29993 Fix available 8.1 HighNovember 3, 2021
• mozilla firefox, firefox mobile +1 more When a malicious application installed on the user's device broadcast an Intent to Firefox for... CVE-2020-26975 Fix available 6.5 MediumJanuary 7, 2021
• mozilla firefox, firefox mobile +1 more By attempting to connect a website using an unresponsive port, an attacker could have controlled... CVE-2020-26977 Fix available 6.5 MediumJanuary 7, 2021
• Show olderLoading…