Clickjacking Vulnerability in Firefox for Android by Mozilla

CVE-2026-74980

What is CVE-2026-74980?

A clickjacking vulnerability has been identified in the Downloads component of Firefox for Android, which could allow attackers to trick users into clicking on deceptive elements. This could ultimately lead to unintentional actions being performed by the user without their consent. The issue has been addressed in Firefox version 154, which mitigates the risks associated with this vulnerability. Users are strongly advised to update to the latest version to ensure their security.

References