Firefox mobile

This hub aggregates every CVE we track for Firefox mobile, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Firefox mobile.

• CVE-2026-84135Other issue in Firefox Focus for Android9.8Sep 1, 2026
• CVE-2026-84127Information disclosure in the WebExtensions component in Firefox for Android4.3Sep 1, 2026
• CVE-2026-84117Privilege escalation in Firefox for Android8.8Sep 1, 2026
• CVE-2026-81267Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS5.4Aug 31, 2026
• CVE-2026-74980Clickjacking issue in the Downloads component in Firefox for Android6.5Aug 18, 2026
• CVE-2026-74975Spoofing issue in the Downloads component in Firefox for Android5.4Aug 18, 2026
• CVE-2026-74951Clickjacking issue in Firefox for Android6.5Aug 18, 2026
• CVE-2026-16404Spoofing issue in Firefox for Android7.4Jul 21, 2026
• CVE-2026-16373Information disclosure in the Privacy component in Firefox for Android7.5Jul 21, 2026
• CVE-2026-14906Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS5.3Jul 13, 2026
• CVE-2026-53900Cookie injection was possible when opening a PDF link4.3Jun 16, 2026
• CVE-2026-53899Cross-origin cookies could be leaked when opening a PDF link6.5Jun 16, 2026
• CVE-2024-43111Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.6.1Aug 6, 2024
• CVE-2024-43113The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS < 129.6.1Aug 6, 2024
• CVE-2024-43112Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129.6.1Aug 6, 2024