Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-1940

Опубликовано: 04 мар. 2025
Источник: nvd
CVSS3: 7.1
EPSS Низкий

Описание

A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used to trick a user in to launching an external app unexpectedly. This issue only affects Android versions of Firefox.. This vulnerability was fixed in Firefox 136.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Версия до 136.0 (исключая)

EPSS

Процентиль: 16%
0.00247
Низкий

7.1 High

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 1 года назад

A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used to trick a user in to launching an external app unexpectedly. *This issue only affects Android versions of Firefox.*. This vulnerability was fixed in Firefox 136.

CVSS3: 5.4
redhat
больше 1 года назад

A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used to trick a user in to launching an external app unexpectedly. *This issue only affects Android versions of Firefox.*. This vulnerability was fixed in Firefox 136.

CVSS3: 7.1
debian
больше 1 года назад

A select option could partially obscure the confirmation prompt shown ...

CVSS3: 7.1
github
больше 1 года назад

A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used to trick a user in to launching an external app unexpectedly. *This issue only affects Android versions of Firefox.* This vulnerability affects Firefox < 136.

CVSS3: 9.8
altlinux
больше 1 года назад

ALT-PU-2025-4567: package `firefox` update to version 136.0.2-alt1

EPSS

Процентиль: 16%
0.00247
Низкий

7.1 High

CVSS3

Дефекты

CWE-1021