CVE-2026-84135
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Other issue in Firefox Focus for Android. It was fixed in Firefox 155.
Risk Assessment
The issue may affect the security or privacy of Firefox Focus users, potentially allowing unauthorized access to data.
Recommendation
Update Firefox Focus on Android to version 155 or later.
Other vulnerabilities in Firefox Focus
See all- CVE-2025-9186Medium
Firefox Focus for Android has a spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142.
- CVE-2023-25743High
A lack of in-app notification for entering fullscreen mode could allow a malicious website to spoof browser chrome. This bug only affects Firefox Focus; other Firefox versions are unaffected. Affects Firefox < 110 and Firefox ESR < 102.8.
Original NVD description (English source)
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS