Umar Farooq

Spoofing issue in the Security component

The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed

Address bar spoofing using an invalid protocol scheme on Firefox for Android

Full screen notification obscured by external program

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, T

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.