CVE-2026-74980

MediumCVSS 6.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

Risk Assessment

Clickjacking could allow an attacker to trick the user into clicking unexpected elements, potentially leading to unauthorized actions such as downloading malware.

Recommendation

It is recommended to update Firefox for Android to version 154 to fix this vulnerability.

Original NVD description (English source)

Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.