← Back

CVE-2016-2810

nvd nist
Published: Apr 30, 2016Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.3 / Impact: 3.6
Source: NVD

Description

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.

Affected (1)

Products: Mozilla: Firefox
Mozilla
1 product
Firefox
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Firefox
Up to 45.0.2
Running on/withPlatform Versions
Google
Android
Up to 4.4.4

Related CWEs

CWE-264
CWE-264

References (10)

Source: security@mozilla.org
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Source: security@mozilla.org
Source: security@mozilla.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.