When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade pipewireUpgrade MozillaFirefox-translations-otherUpgrade pipewire-spa-plugins-0_2Upgrade pipewire-langUpgrade xdg-desktop-portal-langUpgrade xdg-desktop-portal-develUpgrade MozillaFirefoxUpgrade pipewire-spa-toolsUpgrade pipewire-modulesUpgrade mozillafirefox-branding-sleUpgrade MozillaFirefox-translations-commonUpgrade xdg-desktop-portalUpgrade pipewire-modules-0_3Upgrade mozillafirefox-branding-upstreamUpgrade gstreamer-plugin-pipewireUpgrade libpipewire-0_3-0Upgrade pipewire-toolsUpgrade MozillaFirefox-devel | Jul 22, 2025 | Jun 24, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 24, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub