# Mozilla Firefox for Android vulnerabilities Source: https://junglewise.ai/threats/technologies/firefox-for-android Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/firefox-for-android.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 11 vulnerabilities in Mozilla Firefox for Android: 1 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-124937, was published on 10 November 2026. 1 vulnerability in the last four weeks, level on the four before (1). ## Counts - Last 7 days: 1 - Last 30 days: 2 - Last 90 days: 6 - All time: 11 (0 critical, 0 exploited in the wild) ## About Mozilla Firefox for Android A free and open-source web browser developed by Mozilla for Android devices. ## Latest Mozilla Firefox for Android vulnerabilities - [CVE-2026-124937: Firefox for Android Media component unspecified issue](https://junglewise.ai/threats/cve-2026-124937-other-issue-in-the-media-component-in-firefox-for-android-this) (info, published 10 Nov 2026) - [CVE-2026-118018: Firefox Spoofing issue in Downloads component for Android](https://junglewise.ai/threats/cve-2026-118018-spoofing-issue-in-the-downloads-component-in-firefox-for-android) (info, published 27 Oct 2026) - [CVE-2026-100823: Firefox for Android Downloads spoofing in filename display](https://junglewise.ai/threats/cve-2026-100823-spoofing-issue-in-the-downloads-component-in-firefox-for-android) (info, published 29 Sep 2026) - [CVE-2026-84127: Mozilla Firefox for Android information disclosure in WebExtensions](https://junglewise.ai/threats/cve-2026-84127-mozilla-firefox-for-android-information-disclosure-in) (medium, CVSS 4.3, published 1 Sep 2026) - [CVE-2026-74980: Mozilla Firefox for Android clickjacking in Downloads component](https://junglewise.ai/threats/cve-2026-74980-mozilla-firefox-for-android-clickjacking-in-downloads-component) (medium, CVSS 6.5, published 18 Aug 2026) - [CVE-2026-74975: Mozilla Firefox for Android spoofing in Downloads component](https://junglewise.ai/threats/cve-2026-74975-mozilla-firefox-for-android-spoofing-in-downloads-component) (medium, CVSS 5.4, published 18 Aug 2026) - [CVE-2026-16404: Mozilla Firefox for Android spoofing vulnerability](https://junglewise.ai/threats/cve-2026-16404-mozilla-firefox-for-android-spoofing-vulnerability) (info, published 21 Jul 2026) - [CVE-2026-16397: Mozilla Firefox for Android clickjacking in WebExtensions](https://junglewise.ai/threats/cve-2026-16397-mozilla-firefox-for-android-clickjacking-in-webextensions) (info, published 21 Jul 2026) - [CVE-2026-16373: Mozilla Firefox for Android information disclosure in Privacy component](https://junglewise.ai/threats/cve-2026-16373-mozilla-firefox-for-android-information-disclosure-in-privacy) (info, published 21 Jul 2026) - [CVE-2026-8951: Mozilla Firefox for Android spoofing in Toolbar](https://junglewise.ai/threats/cve-2026-8951-mozilla-firefox-for-android-spoofing-in-toolbar) (info, CVSS 4.3, published 19 May 2026) - [CVE-2026-8945: Mozilla Firefox for Android sandbox escape](https://junglewise.ai/threats/cve-2026-8945-mozilla-firefox-for-android-sandbox-escape) (info, CVSS 8.8, published 19 May 2026) ## Most severe Mozilla Firefox for Android vulnerabilities - [CVE-2026-74980: Mozilla Firefox for Android clickjacking in Downloads component](https://junglewise.ai/threats/cve-2026-74980-mozilla-firefox-for-android-clickjacking-in-downloads-component) (medium, CVSS 6.5, published 18 Aug 2026) - [CVE-2026-74975: Mozilla Firefox for Android spoofing in Downloads component](https://junglewise.ai/threats/cve-2026-74975-mozilla-firefox-for-android-spoofing-in-downloads-component) (medium, CVSS 5.4, published 18 Aug 2026) - [CVE-2026-84127: Mozilla Firefox for Android information disclosure in WebExtensions](https://junglewise.ai/threats/cve-2026-84127-mozilla-firefox-for-android-information-disclosure-in) (medium, CVSS 4.3, published 1 Sep 2026) - [CVE-2026-8945: Mozilla Firefox for Android sandbox escape](https://junglewise.ai/threats/cve-2026-8945-mozilla-firefox-for-android-sandbox-escape) (info, CVSS 8.8, published 19 May 2026) - [CVE-2026-8951: Mozilla Firefox for Android spoofing in Toolbar](https://junglewise.ai/threats/cve-2026-8951-mozilla-firefox-for-android-spoofing-in-toolbar) (info, CVSS 4.3, published 19 May 2026) - [CVE-2026-124937: Firefox for Android Media component unspecified issue](https://junglewise.ai/threats/cve-2026-124937-other-issue-in-the-media-component-in-firefox-for-android-this) (info, published 10 Nov 2026) - [CVE-2026-118018: Firefox Spoofing issue in Downloads component for Android](https://junglewise.ai/threats/cve-2026-118018-spoofing-issue-in-the-downloads-component-in-firefox-for-android) (info, published 27 Oct 2026) - [CVE-2026-100823: Firefox for Android Downloads spoofing in filename display](https://junglewise.ai/threats/cve-2026-100823-spoofing-issue-in-the-downloads-component-in-firefox-for-android) (info, published 29 Sep 2026) - [CVE-2026-16404: Mozilla Firefox for Android spoofing vulnerability](https://junglewise.ai/threats/cve-2026-16404-mozilla-firefox-for-android-spoofing-vulnerability) (info, published 21 Jul 2026) - [CVE-2026-16397: Mozilla Firefox for Android clickjacking in WebExtensions](https://junglewise.ai/threats/cve-2026-16397-mozilla-firefox-for-android-clickjacking-in-webextensions) (info, published 21 Jul 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, level on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 2 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Other Mozilla technologies - [Mozilla Firefox](https://junglewise.ai/threats/technologies/firefox): 869 vulnerabilities - [Mozilla Firefox ESR](https://junglewise.ai/threats/technologies/firefox-esr): 642 vulnerabilities - [Mozilla Thunderbird](https://junglewise.ai/threats/technologies/thunderbird): 396 vulnerabilities - [Mozilla Thunderbird-Esr](https://junglewise.ai/threats/technologies/thunderbird-esr): 86 vulnerabilities - [Mozilla Firefox for iOS](https://junglewise.ai/threats/technologies/firefox-for-ios): 17 vulnerabilities - [Mozilla Firefox Mobile](https://junglewise.ai/threats/technologies/firefox-mobile): 7 vulnerabilities - [Mozilla Firefox Focus](https://junglewise.ai/threats/technologies/firefox-focus-for-android): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Mozilla Firefox for Android vulnerabilities", https://junglewise.ai/threats/technologies/firefox-for-android, 11 November 2026.