CVE-2026-16404: Spoofing issue in Firefox for Android
Published Jul 21, 2026
·Updated
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
Affected Software
3 affected componentsFixes available
Mozilla Firefox for Android
Mozilla Firefox<153
153
Mozilla Firefox Mobile Android<153.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 153
Event History
Jul 21, 2026
CVE Published
via Mozilla·12:00 AM
Data Sourced
via Mozilla·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·12:38 PM
Data Sourced
via MITRE·12:38 PM
Description
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-16349
- CVE-2026-16350
- CVE-2026-16362
- CVE-2026-16351
- CVE-2026-16352
- CVE-2026-16363
- CVE-2026-16364
- CVE-2026-16365
- CVE-2026-16366
- CVE-2026-16353
- CVE-2026-16354
- CVE-2026-16367
- CVE-2026-16368
- CVE-2026-16369
- CVE-2026-16355
- CVE-2026-16356
- CVE-2026-16357
- CVE-2026-16370
- CVE-2026-16371
- CVE-2026-16372
- CVE-2026-16373
- CVE-2026-16374
- CVE-2026-16375
- CVE-2026-16376
- CVE-2026-16377
- CVE-2026-16378
- CVE-2026-16379
- CVE-2026-16358
- CVE-2026-16380
- CVE-2026-16381
- CVE-2026-16382
- CVE-2026-16383
- CVE-2026-16384
- CVE-2026-16385
- CVE-2026-16386
- CVE-2026-16387
- CVE-2026-16388
- CVE-2026-16389
- CVE-2026-16390
- CVE-2026-16391
- CVE-2026-16392
- CVE-2026-16393
- CVE-2026-16359
- CVE-2026-16394
- CVE-2026-16395
- CVE-2026-16396
- CVE-2026-16397
- CVE-2026-16398
- CVE-2026-16399
- CVE-2026-16400
- CVE-2026-16401
- CVE-2026-16402
- CVE-2026-16403
- CVE-2026-16404
- CVE-2026-16405
- CVE-2026-16406
- CVE-2026-16407
- CVE-2026-16408
- CVE-2026-16409
- CVE-2026-16410
- CVE-2026-16411
- CVE-2026-16412
- CVE-2026-16360
Frequently Asked Questions
1
What is the severity of CVE-2026-16404?
The severity of CVE-2026-16404 is high with a CVSS score of 7.4.
2
How do I fix CVE-2026-16404?
To fix CVE-2026-16404, upgrade to Firefox version 153 or later.
3
What type of vulnerability is CVE-2026-16404?
CVE-2026-16404 is a spoofing issue affecting Firefox for Android.
4
Which versions of Firefox are affected by CVE-2026-16404?
CVE-2026-16404 affects Mozilla Firefox for Android as well as other related Firefox versions prior to 153.
5
When was CVE-2026-16404 published?
CVE-2026-16404 was published on July 21, 2026.