CVE-2016-1940 on Ubuntu 12.04 LTS (precise) - medium.
Description:
Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a data: URL that is mishandled during (1) shortcut opening or (2) BOOKMARK intent processing.