CVE-2026-100823CWE-451

CVE-2026-100823

Medium · published September 29, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Weakness
CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published
2026-09-29T17:17Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox_mobile< 157.0157.0
References (2)
https://bugzilla.mozilla.org/show_bug.cgi?id=2054384 · [email protected]https://www.mozilla.org/security/advisories/mfsa2026-97/ · [email protected]
EPSS history
Timeline
  • 01 OCT 03:44Z
    EPSS moved — → 0%
    epss
  • 29 SEP 12:36Z
    Spoofing issue in the Downloads component in Firefox for Android
    cvelistv5