CVE-2015-2714

no score yetEPSS 0.3%

mozilla firefox: no CVSS score yet. EPSS 0.3% chance of exploitation in the next 30 days.

Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier.

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2015-05-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

http://www.mozilla.org/security/announce/2015/mfsa2015-52.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securityfocus.com/bid/74611
https://bugzilla.mozilla.org/show_bug.cgi?id=1149094
https://security.gentoo.org/glsa/201605-06

Check your stack JSON