CVE-2025-1940 — Android Intent confirmation prompt tapjacking using Select options
A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used to trick a user in to launching an external app unexpect…
Published: 2025-03-04 · CVSS: 7.1 · CVSS 3.1
A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used to trick a user in to launching an external app unexpectedly. *This issue only affects Android versions of Firefox.*. This vulnerability was fixed in Firefox 136.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7