CVE-2026-16373 is an information disclosure vulnerability affecting the Privacy component in Firefox for Android. The issue was addressed and fixed in Firefox version 153. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, with an attack vector of network, low attack complexity, no privileges required, and no user interaction needed. The impact is high confidentiality loss without integrity or availability impact. There are no known exploits in the wild. The vendor advisory confirms the fix in Firefox 153.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information from the Privacy component in Firefox for Android. This could compromise user privacy but does not affect integrity or availability of the application. The vulnerability is rated high severity due to the confidentiality impact and ease of exploitation (network vector, no privileges or user interaction required).

A fix is available and has been implemented in Firefox version 153. Users and administrators should update Firefox for Android to version 153 or later to remediate this vulnerability. There is no indication from the vendor advisory that additional mitigation steps are required beyond applying the update.