CVE-2016-9065

CVE-2016-9065 describes a critical vulnerability in Firefox for Android versions prior to 50, allowing for location bar spoofing. An attacker could force a user into fullscreen mode, prevent its exit, and display a fake location bar without user notification, potentially leading to phishing attacks. This high-severity vulnerability (CVSS 7.5) has a low attack complexity and could result in significant integrity impact, as it allows for deceptive user interface manipulation. While no public exploit code or active exploitation is indicated, the vulnerability garnered some community discussion and media coverage at the time of its disclosure.