Unrated severityNVD Advisory· Published Nov 5, 2015· Updated May 6, 2026

CVE-2015-7186

Description

Mozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same Origin Policy and trigger (1) a download or (2) cached profile-data reading via a file: URL in a saved HTML document.

Affected products

Mozilla Corporation/Firefox
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Range: <=41.0.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.mozilla.org/security/announce/2015/mfsa2015-120.htmlnvdVendor Advisory
lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.htmlnvd
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlnvd
www.securitytracker.com/id/1034069nvd
bugzilla.mozilla.org/show_bug.cginvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000