CVE-2015-2714: Mozilla Firefox

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier.

Affected products

• Mozilla Firefox: up to and including 37.0.2

Published 2015-05-14. Last modified 2026-06-17.