Veille CVE

Recherche « Mozilla firefox mobile »

19 CVE

Critique 2 Élevée 7 Moyenne 10 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Mozilla firefox mobile » ✕
  1. CVE-2026-100823 5.4 Moyenne

    Mozilla Firefox · Mozilla firefox mobile

    Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.

  2. CVE-2026-92033 8.8 Élevée

    Mozilla Firefox · Mozilla firefox mobile

    Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.

  3. CVE-2026-86853 4.3 Moyenne

    Mozilla Firefox for iOS · Mozilla firefox mobile

    A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.

  4. CVE-2026-84135 9.8 Critique

    Mozilla Firefox · Mozilla firefox mobile

    Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.

  5. CVE-2026-84127 4.3 Moyenne

    Mozilla Firefox · Mozilla firefox mobile

    Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.

  6. CVE-2026-84117 8.8 Élevée

    Mozilla Firefox · Mozilla firefox mobile

    Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.

  7. CVE-2026-81267 5.4 Moyenne

    Mozilla Firefox for iOS · Mozilla firefox mobile

    A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.

  8. CVE-2026-74980 6.5 Moyenne

    Mozilla Firefox · Mozilla firefox mobile

    Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

  9. CVE-2026-74975 5.4 Moyenne

    Mozilla Firefox · Mozilla firefox mobile

    Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

  10. CVE-2026-74951 6.5 Moyenne

    Mozilla Firefox · Mozilla firefox mobile

    Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.

  11. CVE-2026-16404 7.4 Élevée

    Mozilla Firefox · Mozilla firefox mobile

    Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

  12. CVE-2026-16373 7.5 Élevée

    Mozilla Firefox · Mozilla firefox mobile

    Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.

  13. CVE-2026-14906 5.3 Moyenne

    Mozilla Firefox for iOS · Mozilla firefox mobile

    Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.

  14. CVE-2026-53900 4.3 Moyenne

    Mozilla Firefox for iOS · Mozilla firefox mobile

    Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0.

  15. CVE-2026-53899 6.5 Moyenne

    Mozilla Firefox for iOS · Mozilla firefox mobile

    Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. This vulnerability was fixed in Firefox for iOS 152.0.

  16. CVE-2023-25747 7.5 Élevée

    Mozilla Firefox for Android · Mozilla firefox mobile

    A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.

  17. CVE-2023-29539 8.8 Élevée

    Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android

    When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

  18. CVE-2023-29536 8.8 Élevée

    Mozilla Firefox · Mozilla Focus for Android · Mozilla Firefox ESR · Mozilla Firefox for Android

    An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

  19. CVE-2022-26486 9.6 Critique Exploitée

    Mozilla Firefox · Mozilla Firefox ESR · Mozilla Firefox for Android · Mozilla Thunderbird

    An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.