CVE-2025-1939 — Tapjacking in Android Custom Tabs using transition animations
Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive per…
Published: 2025-03-04 · CVSS: 3.9 · CVSS 3.1
Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7