Veille CVE

Recherche « Mozilla Firefox for iOS »

4 CVE

Critique 0 Élevée 1 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Mozilla Firefox for iOS » ✕
  1. CVE-2026-103418 8.8 Élevée

    Mozilla Firefox for iOS

    Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1.

  2. CVE-2026-103417 5.5 Moyenne

    Mozilla Firefox for iOS

    Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.

  3. CVE-2026-86853 4.3 Moyenne

    Mozilla Firefox for iOS · Mozilla firefox mobile

    A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.

  4. CVE-2026-81267 5.4 Moyenne

    Mozilla Firefox for iOS · Mozilla firefox mobile

    A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.