Clickjacking Vulnerability in Firefox for Android WebExtensions
CVE-2026-16397

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 21 July 2026

What is CVE-2026-16397?

A clickjacking vulnerability exists in the WebExtensions component of Firefox for Android, which could allow an attacker to trick users into clicking on hidden or disguised elements. This could lead to unauthorized actions being performed on behalf of the user without their consent. Mozilla has addressed this issue in Firefox version 153, reinforcing user protection against such deceptive security threats.

Affected Version(s)

Firefox 153

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2047608

https://www.mozilla.org/security/advisories/mfsa2026-68/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 21, 2026
Vulnerability Reserved
Jul 20, 2026

Credit

Hafiizh

CVE-2026-16397 Data

JSON