35
CVE-2025-1939
—CVSS 3.1
3.9 low
EPSS
<1%p8
Published
()
Modified
Description
Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136.
- Vendors
- mozilla
- Products
- firefox
- Weakness
- CWE-359
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N