CVE-2026-8951: Spoofing issue in the Toolbar component in Firefox for Android
Published May 19, 2026
·Updated
Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151.
Affected Software
2 affected componentsFixes available
Mozilla Firefox<151
151
Mozilla Firefox<151.0.0
Event History
May 19, 2026
CVE Published
via Mozilla·12:00 AM
Data Sourced
via Mozilla·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·12:29 PM
Data Sourced
via MITRE·12:29 PM
Description
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Jan 17, 58356
Event
via FIRST·04:40 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-8951?
CVE-2026-8951 is classified as a medium severity vulnerability due to its potential to allow spoofing attacks.
2
How do I fix CVE-2026-8951?
To fix CVE-2026-8951, you should update to Firefox version 151 or later.
3
What component is affected by CVE-2026-8951?
CVE-2026-8951 affects the Toolbar component in Firefox for Android.
4
Is my version of Firefox affected by CVE-2026-8951?
If you are using a version of Firefox prior to 151, you are affected by CVE-2026-8951.
5
What type of vulnerability is CVE-2026-8951?
CVE-2026-8951 is a spoofing vulnerability that can compromise user interactions.