CVE-2016-2810: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.

Affected products

• Mozilla Firefox: up to and including 45.0.2

Published 2016-04-30. Last modified 2026-06-17.