Information Disclosure in Firefox for Android WebExtensions Component
CVE-2026-84127

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 1 September 2026

What is CVE-2026-84127?

A vulnerability in the WebExtensions component of Firefox for Android allows unauthorized information disclosure. This flaw could potentially expose sensitive user data. Mozilla has addressed this issue in Firefox version 155, enhancing the security measures to protect users. Users are encouraged to update their browsers to the latest version to mitigate any risks associated with this vulnerability.

Affected Version(s)

Firefox 155

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1699444

https://www.mozilla.org/security/advisories/mfsa2026-82/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 1, 2026
Vulnerability Reserved
Sep 1, 2026

Credit

Wladimir Palant

CVE-2026-84127 Data

JSON