CVE-2026-74975

MediumCVSS 5.4

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

A spoofing issue exists in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

An attacker could exploit this vulnerability to spoof trusted download sources, potentially leading to malware installation or data phishing.

Update Firefox for Android to version 154 or later.

Original NVD description (English source)

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.