CVE-2026-118018 — Spoofing issue in the Downloads component in Firefox for Android

A spoofing issue involving user-interface misrepresentation of critical information (CWE-451) was identified in the Downloads component of Firefox for Android. According to the source, the vulnerability was fixed in Firefox 159.