CVE-2026-84127
published 2026-09-01CVE-2026-84127: Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
PriorityP418medium4.3CVSS 3.1
AVNACLPRNUIRSUCLINAN
EPSS
0.26%
16.6th percentile
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | < Firefox 155 | Firefox 155 |
| mozilla | firefox | — | — |
| mozilla | firefox_mobile | < 155.0 | 155.0 |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
firefox: Firefox: Information disclosure in WebExtensions component
vendor_redhat·2026-09-01·CVSS 4.3
CVE-2026-84127 [MEDIUM] CWE-201 firefox: Firefox: Information disclosure in WebExtensions component
firefox: Firefox: Information disclosure in WebExtensions component
A flaw was found in the WebExtensions component of Firefox for Android. This vulnerability allows for information disclosure, potentially enabling an attacker to gain access to sensitive data.
Package: firefox (Red Hat Enterprise Linux 10) - Fix deferred
Package: firefox (Red Hat Enterprise Linux 7) - Fix deferred
Package: firefox (Red Hat Enterprise Linux 8) - Fix deferred
Package: firefox (Red Hat Enterprise Linux 9) - Fix deferred
Mozilla
Mozilla Foundation Security Advisory 2026-82: CVE-2026-84127
vendor_mozilla·CVSS 4.3
CVE-2026-84127 [MEDIUM] Mozilla Foundation Security Advisory 2026-82: CVE-2026-84127
Mozilla Foundation Security Advisory 2026-82
CVE: CVE-2026-84127
Product: Firefox
Impact: high
Fixed in: Firefox 155
VulDB
Mozilla Firefox up to 154 WebExtensions information disclosure (Nessus ID 342196)
vuldb·2026-09-07·CVSS 4.3
CVE-2026-84127 [MEDIUM] Mozilla Firefox up to 154 WebExtensions information disclosure (Nessus ID 342196)
A vulnerability marked as problematic has been reported in Mozilla Firefox up to 154. Impacted is an unknown function of the component WebExtensions. Performing a manipulation results in information disclosure.
This vulnerability is identified as CVE-2026-84127. The attack can be initiated remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
GHSA
Information disclosure in the WebExtensions component in Firefox for Android.
ghsa_unreviewed·2026-09-01
CVE-2026-84127 [MEDIUM] CWE-200 Information disclosure in the WebExtensions component in Firefox for Android.
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-84127 firefox: Firefox: Information disclosure in WebExtensions component [fedora-all]
bugzilla·2026-09-03·CVSS 4.3
CVE-2026-84127 [MEDIUM] CVE-2026-84127 firefox: Firefox: Information disclosure in WebExtensions component [fedora-all]
CVE-2026-84127 firefox: Firefox: Information disclosure in WebExtensions component [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
Bugzilla
CVE-2026-84127 firefox: Firefox: Information disclosure in WebExtensions component
bugzilla·2026-09-01·CVSS 4.3
CVE-2026-84127 [MEDIUM] CVE-2026-84127 firefox: Firefox: Information disclosure in WebExtensions component
CVE-2026-84127 firefox: Firefox: Information disclosure in WebExtensions component
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
2026-09-01
Published