CVE-2026-118018

Published 27 October 2026 · tracked since 28 October 2026

Description

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-117602 HIGH 8.4
• CVE-2026-117603 MEDIUM 4.3
• CVE-2026-117566 MEDIUM 5.3
• CVE-2026-117564 CRITICAL 9.8
• CVE-2026-117558 HIGH 7.8
• CVE-2026-117559 HIGH 7.8
• CVE-2026-117554 MEDIUM 4.3
• CVE-2026-65119 HIGH 8.4
• CVE-2026-117499 LOW 3.7
• CVE-2026-10752 MEDIUM 4.8

→ Open the live CVE board · all tools