CVE-2026-18809CWE-200information-disclosure

CVE-2026-18809

Medium · published August 4, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-08-04T17:17Z
References (2)
https://bugzilla.mozilla.org/show_bug.cgi?id=2055683 · [email protected]https://www.mozilla.org/security/advisories/mfsa2026-73/ · [email protected]
EPSS history
Timeline
  • 04 AUG 12:31Z
    Information disclosure in Firefox for Android and Firefox Focus for Android
    cvelistv5