CVE-2015-8512: Mozilla Firefox OS

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses.

Affected products

• Mozilla Firefox OS: up to and including 2.2

Published 2016-01-09. Last modified 2026-06-17.