CVE-2015-7185: Mozilla Firefox before 42.0 on Android does not ensure that the address bar is restored upon fullscreen-mod...

Security readout for executives and security teams

Firefox for Android before 42.0 could let a malicious web page make the browser’s address bar show misleading information after fullscreen mode. The main business risk is credential theft or fraud through convincing mobile phishing, not direct device takeover based on the supplied sources. Exposure is limited to Android devices running Firefox before 42.0. Modern managed fleets are unlikely to be exposed, but legacy Android devices, unmanaged BYOD, embedded mobile workflows, or old testing devices should be checked. Prioritize as a cleanup item for legacy mobile risk. It is not currently supported as actively exploited, but it can undermine user trust in browser identity indicators and support phishing outcomes. Mitigation focus: Upgrade Firefox for Android to version 42.0 or later where still in use.; Remove or block legacy Firefox for Android from managed Android devices.; Check Mozilla and OS vendor advisories for any platform-specific guidance..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.