CVE-2015-7190: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML documents via a crafted application.

Affected products

• Mozilla Firefox: up to and including 41.0.2

Published 2015-11-05. Last modified 2026-06-17.