CVE Tools
Track your stack

Firefox Mobile

87 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Firefox Mobile, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Firefox Mobile CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Firefox Mobile CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-062
2026-073
2026-084
2026-096
2026-100
2026-110

Severity

How the 87 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical2225%
  • High1720%
  • Medium4754%
  • Low11%

Latest CVEs

The 15 most recently published vulnerabilities affecting Firefox Mobile.

  1. CVE-2026-100823Spoofing issue in the Downloads component in Firefox for Android5.4
  2. CVE-2026-92033Privilege escalation in Firefox for Android8.8
  3. CVE-2026-86853Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS4.3
  4. CVE-2026-84135Other issue in Firefox Focus for Android9.8
  5. CVE-2026-84127Information disclosure in the WebExtensions component in Firefox for Android4.3
  6. CVE-2026-84117Privilege escalation in Firefox for Android8.8
  7. CVE-2026-81267Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS5.4
  8. CVE-2026-74980Clickjacking issue in the Downloads component in Firefox for Android6.5
  9. CVE-2026-74975Spoofing issue in the Downloads component in Firefox for Android5.4
  10. CVE-2026-74951Clickjacking issue in Firefox for Android6.5
  11. CVE-2026-16404Spoofing issue in Firefox for Android7.4
  12. CVE-2026-16373Information disclosure in the Privacy component in Firefox for Android7.5
  13. CVE-2026-14906Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS5.3
  14. CVE-2026-53900Cookie injection was possible when opening a PDF link4.3
  15. CVE-2026-53899Cross-origin cookies could be leaked when opening a PDF link6.5

Product grouping is registry-driven, with AI assist and human review. How it works