Mozilla Firefox Intent Confirmation Prompt Tapjacking Vulnerability on Android

A tapjacking vulnerability has been identified in the Android version of Mozilla Firefox, prior to version 136. This issue involves a select option that can partially obscure the confirmation prompt displayed before launching external applications. As a result, a user could be misled into unintentionally opening an external app.

Impact

Exploitation of this vulnerability could lead to unintended interactions with external applications, potentially allowing for the misuse of app permissions or functionalities.

Remediation

Users can update to Firefox version 136 or later to address this vulnerability.