Recherche « Mozilla Firefox for Android »
21 CVE
-
CVE-2026-100823 5.4 Moyenne
Mozilla Firefox · Mozilla firefox mobile
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.
-
CVE-2026-92033 8.8 Élevée
Mozilla Firefox · Mozilla firefox mobile
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.
-
CVE-2026-84135 9.8 Critique
Mozilla Firefox · Mozilla firefox mobile
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
-
CVE-2026-84127 4.3 Moyenne
Mozilla Firefox · Mozilla firefox mobile
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
-
CVE-2026-84117 8.8 Élevée
Mozilla Firefox · Mozilla firefox mobile
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
-
CVE-2026-74980 6.5 Moyenne
Mozilla Firefox · Mozilla firefox mobile
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
-
CVE-2026-74975 5.4 Moyenne
Mozilla Firefox · Mozilla firefox mobile
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
-
CVE-2026-74951 6.5 Moyenne
Mozilla Firefox · Mozilla firefox mobile
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
-
CVE-2026-18809 6.5 Moyenne
Mozilla Firefox
Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.
-
CVE-2026-16404 7.4 Élevée
Mozilla Firefox · Mozilla firefox mobile
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
-
CVE-2026-16397 6.5 Moyenne
Mozilla Firefox
Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.
-
CVE-2026-16373 7.5 Élevée
Mozilla Firefox · Mozilla firefox mobile
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.
-
CVE-2026-8951 6.5 Moyenne
Mozilla Firefox
Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151.
-
CVE-2026-8945 7.5 Élevée
Mozilla Firefox · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7
Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.
-
CVE-2023-25747 7.5 Élevée
Mozilla Firefox for Android · Mozilla firefox mobile
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.
-
CVE-2023-29550 8.8 Élevée
Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
-
CVE-2023-29548 6.5 Moyenne
Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
-
CVE-2023-29539 8.8 Élevée
Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
-
CVE-2023-29536 8.8 Élevée
Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
-
CVE-2023-29535 6.5 Moyenne
Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
-
Mozilla Firefox · Mozilla Firefox ESR · Mozilla Firefox for Android · Mozilla Thunderbird
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.