Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-8951 EUVD-2026-30903GHSA-p3qw-gcrh-3pq6

Spoofing issue in the Toolbar component in Firefox for Android

Published May 19, 2026 · Updated May 19, 2026 · Assigned by mozilla

Description

Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151.

Affected products

VendorProductAffectedFixed
Mozilla Firefox — 151

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS mozjs102 +1 No fix yet —
Ubuntu 22.04 LTS mozjs78 +3 No fix yet —
Ubuntu 20.04 LTS mozjs52 +1 No fix yet —
Ubuntu 18.04 LTS mozjs38 +1 No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 151.0.1-1.1 openSUSE-SU-2026:10863-1
openSUSE Tumbleweed firefox-esr 153.0-1.1 openSUSE-SU-2026:11373-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling firefox 151-r0 —

Advisories 3

References