First published: Tue Mar 14 2023(Updated: )
Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. <br>*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111.
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <111 | 111 |
<111 | 111 | |
Mozilla Firefox | <111.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-25749 is a vulnerability that allows unpatched Android applications to be launched from a browser using Intents, exposing users to these vulnerabilities.
CVE-2023-25749 only affects Firefox for Android, where it allows unpatched Android applications to be launched from a browser.
CVE-2023-25749 has a severity rating of high (7) due to the potential exposure of users to unpatched vulnerabilities.
The remedy for CVE-2023-25749 is to update Mozilla Firefox to version 111 or above.
You can find more information about CVE-2023-25749 on the Mozilla Bugzilla and Mozilla Security Advisories websites.