Saint TapTrap

Technical record

Disclosed on

July 6 2025

CVE

CVE-2025-1939CVE-2025-3067

CVSS

8.8

Product

Mozilla · Firefox

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136.

Sources: taptrap.click