CVE-2026-9078

5.4 Moyenne

Publiée le 25/05/2026 à 17:16 · Modifiée le 23/07/2026 à 13:10 · Analyse NVD en cours · Source : security@mozilla.org

Description

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This vulnerability was fixed in Firefox for iOS 151.1.

Traduire en français

Produits concernés

Mozilla Firefox for iOS
Mozilla firefox

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L`

Faiblesses (CWE)

CWE-451

Références

https://bugzilla.mozilla.org/show_bug.cgi?id=2029371 Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-52/ Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories