The vulnerability is a spoofing flaw in the Toolbar component of Firefox for Android. It permits malicious content to display counterfeit toolbar elements, which can mislead users into performing unintended actions or revealing sensitive information. Based on the description, the likely attack vector involves malicious web pages or compromised add‑on content that instructs the browser to render falsified UI elements. The consequence of such deception is a breach of user trust and potential compromise of credentials or data accessed through the UI.

Mozilla Firefox for Android, all releases prior to version 151.

The CVSS score is 6.5 and the EPSS score is unavailable, indicating no known data on exploitation likelihood. The vulnerability is not listed in CISA KEV. Because the issue was fixed in Firefox 151, the risk is mitigated by upgrading. Prior to updating, the flaw could be exploited through local or remote means by loading malicious content that tricks the user, but the lack of exploitation data makes it difficult to assess real‑world impact.