CVE-2026-74975

EPSS 0.17%
Veröffentlicht 18.08.2026 12:23:39
Zuletzt bearbeitet 25.08.2026 15:40:17
Erkennungen
Login

Spoofing issue in the Downloads component in Firefox for Android

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Mobile SwPlatform android Version < 154.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.17%	0.069

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	5.4	2.8	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-451 User Interface (UI) Misrepresentation of Critical Information

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

https://www.mozilla.org/security/advisories/mfsa2026-74/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1842361

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2026-74975

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-74975

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-74975

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-74975