CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/09/2026 |
| CVE-2026-84127 | 中危4.3 | Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155. | 01/09/2026 |
| CVE-2026-84117 | 高危8.8 | Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155. | 01/09/2026 |
| CVE-2026-81267 | 中危5.4 | A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0. | 31/08/2026 |
| CVE-2026-74980 | 中危6.5 | Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. | 18/08/2026 |
| CVE-2026-74975 | 中危5.4 | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. | 18/08/2026 |
| CVE-2026-74951 | 中危6.5 | Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154. | 18/08/2026 |
| CVE-2026-16404 | 高危7.4 | Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153. | 21/07/2026 |
| CVE-2026-16373 | 高危7.5 | Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153. | 21/07/2026 |
| CVE-2026-14906 | 中危5.3 | Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4. | 13/07/2026 |
| CVE-2026-53900 | 中危4.3 | Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0. | 16/06/2026 |
| CVE-2026-53899 | 中危6.5 | Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. This vulnerability was fixed in Firefox for iOS 152.0. | 16/06/2026 |
| CVE-2024-43113 | 中危6.1 | The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS < 129. | 06/08/2024 |
| CVE-2024-43112 | 中危6.1 | Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129. | 06/08/2024 |
| CVE-2024-43111 | 中危6.1 | Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129. | 06/08/2024 |
| CVE-2024-7523 | 高危8.1 | A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions.
*This issue only affects Android versions of Firefox.* This vulnerability affects Firefox < 129. | 06/08/2024 |
| CVE-2024-38313 | 中危4.3 | In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127. | 13/06/2024 |