PULSE
ES
FEED
ransomwhitearmor reclama a wagyu.xyz · Retail & E-Commerceransomdirewolf reclama a GRUPO PETROIL · MX · Energy & Utilitiesransombooba project reclama a RCOA- Regent Christian Online Academy · CA · Educationransombooba project reclama a Kerckstede vzw · BE · Otherransombooba project reclama a BASS Medical Group · US · Healthcareransombooba project reclama a Hudson River Museum · US · Educationransombooba project reclama a Horizon Eye Specialists & LASIK Center · US · Healthcareransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defenseransomwhitearmor reclama a wagyu.xyz · Retail & E-Commerceransomdirewolf reclama a GRUPO PETROIL · MX · Energy & Utilitiesransombooba project reclama a RCOA- Regent Christian Online Academy · CA · Educationransombooba project reclama a Kerckstede vzw · BE · Otherransombooba project reclama a BASS Medical Group · US · Healthcareransombooba project reclama a Hudson River Museum · US · Educationransombooba project reclama a Horizon Eye Specialists & LASIK Center · US · Healthcareransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defense
← All CVEs
CVE WatchOct 27, 2026

CVE-2026-118018

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 27, 2026 · Last modified: Oct 27, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.

Official references
Related CVEs

No related CVEs by CWE or product.