Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150. The flaw allows an attacker to disable or circumvent built-in security mitigations within the browser, potentially weakening its overall security posture.

Mozilla Firefox for Android. Versions before 150 are potentially affected. No further version granularity is provided.

The CVSS score is 6.1, but the EPSS score is missing. The vulnerability is not listed in CISA’s KEV, so no confirmed exploitation is recorded. The likely attack vector involves malicious content accessed through the browser, thus the risk depends on the ability of an attacker to supply such content. Because the issue bypasses mitigations, the potential impact could be high if exploit conditions are met, but no concrete exploitation data is available.