Clickjacking Vulnerability in Autofill Component of Firefox for Android

CVE-2026-124911

What is CVE-2026-124911?

A clickjacking vulnerability exists within the Autofill component of Firefox for Android that could allow attackers to manipulate user interactions. This flaw has been addressed in Firefox version 160, enhancing the security posture of the application. Users are advised to update their Firefox for Android application to ensure protection against such manipulation techniques that could lead to unauthorized actions on their behalf.

References