PT-2026-61909 · Mozilla · Firefox For Android

·

CVE-2026-16397

·

Published

2026-07-21

·

Updated

2026-08-31

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 153
Description A clickjacking issue exists in the WebExtensions component. Clickjacking is a technique where an attacker uses multiple transparent or semi-transparent layers to trick a user into clicking on a button or link on another page when they were intending to click on the top-level page.
Recommendations Update to version 153.

Fix

Clickjacking

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-16397
OPENSUSE-SU-2026:11358-1
OPENSUSE-SU-2026:11373-1
OPENSUSE-SU-2026:21713-1
SUSE-SU-2026:23411-1

Affected Products

Firefox For Android