Mozilla: >> Firefox Mobile Security Vulnerabilities
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVSS Score
7.4
EPSS Score
0.002
Published
2026-07-21
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-07-21
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.
CVSS Score
5.3
EPSS Score
0.003
Published
2026-07-13
Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. This vulnerability was fixed in Firefox for iOS 152.0.
CVSS Score
6.5
EPSS Score
0.001
Published
2026-06-16
Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0.
CVSS Score
4.3
EPSS Score
0.001
Published
2026-06-16
Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.
CVSS Score
6.1
EPSS Score
0.003
Published
2024-08-06
Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.
CVSS Score
6.1
EPSS Score
0.003
Published
2024-08-06
The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS < 129.
CVSS Score
6.1
EPSS Score
0.003
Published
2024-08-06
A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions.
*This issue only affects Android versions of Firefox.* This vulnerability affects Firefox < 129.
CVSS Score
8.1
EPSS Score
0.003
Published
2024-08-06
When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127.
CVSS Score
6.5
EPSS Score
0.003
Published
2024-06-13