Known vulnerabilities in Firefox Focus for Android

Vendor: Mozilla
Software: Firefox Focus for Android
Software CPE: cpe:2.3:a:mozilla:firefox_focus_for_android:*:*:*:*:*:*:*:*
Website: https://www.mozilla.org
Total vulnerabilities: 59
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firefox Focus for Android Firefox Focus for Android is affected by 59 known vulnerabilities: 1 critical, 25 high, 20 medium, 13 low Critical High Medium Low

Vulnerabilities (59)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140966 - Exposure of sensitive information to an unauthorized actor
CVE-2026-18809		 CWE-200 Medium
No
No
 153.0.3 05.08.2026 SB2026080536
#VU123230 - Out-of-bounds read
CVE-2026-2794		 CWE-125 Medium
No
No
 148.0 25.02.2026 SB2026022446
#VU117002 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-11720		 CWE-451 Medium
No
No
 144.0 14.10.2025 SB2025101454
#VU114393 - Memory corruption
CVE-2025-9184		 CWE-119 High
No
No
 142.0 22.08.2025 SB2025081946
SB2025082301
SB2025082303
and 4 more
#VU114391 - Memory corruption
CVE-2025-9187		 CWE-119 High
No
No
 142.0 22.08.2025 SB2025081946
SB2025082303
SB2025082839
and 4 more
#VU114390 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-9183		 CWE-451 Medium
No
No
 142.0 22.08.2025 SB2025081946
SB2025082839
SB2025082840
and 5 more
#VU114389 - Resource exhaustion
CVE-2025-9182		 CWE-400 Low
No
No
 142.0 22.08.2025 SB2025081946
SB2025082301
SB2025082303
and 28 more
#VU114388 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-9186		 CWE-451 Medium
No
No
 142.0 22.08.2025 SB2025081946
#VU114387 - Use of Uninitialized Variable
CVE-2025-9181		 CWE-457 High
No
No
 142.0 22.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114227 - Memory corruption
CVE-2025-9180		 CWE-119 High
No
No
 142.0 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114226 - Security Features
CVE-2025-9185		 CWE-254 Medium
No
No
 142.0 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 37 more
#VU114225 - Memory corruption
CVE-2025-9179		 CWE-119 High
No
No
 142.0 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU113153 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-8043		 CWE-451 Medium
No
No
 141.0 22.07.2025 SB2025072253
SB2025072321
#VU105323 - Security Features
CVE-2025-1941		 CWE-254 Low
No
No
 136.0 05.03.2025 SB2025030502
SB2025051221
#VU102510 - Security Features
CVE-2025-0245		 CWE-254 Low
No
No
 134.0 09.01.2025 SB2025010985
#VU102427 - Memory corruption
CVE-2025-0241		 CWE-119 High
No
No
 134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102426 - Use After Free
CVE-2025-0240		 CWE-416 Medium
No
No
 134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102425 - Improper Certificate Validation
CVE-2025-0239		 CWE-295 Medium
No
No
 134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102424 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2025-0237		 CWE-441 Low
No
No
 134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102422 - Use After Free
CVE-2025-0238		 CWE-416 High
No
No
 134.0 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 38 more


Showing elements 1 - 20 out of 59