{"id":"CVE-2024-26281","aliases":["EUVD-2024-23552","GHSA-7hw4-x97q-5wx2"],"status":"published","title":"Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed...","description":"Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS \u003c 123.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00313,"percentile":0.24367,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2024-02-22T14:56:45Z","modified":"2026-06-17T07:17:32Z","products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox for ios"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1868005","tags":["x_transferred","Issue Tracking"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-08/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-26281"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-08"},{"url":"https://github.com/advisories/GHSA-7hw4-x97q-5wx2"}],"sources":{"cve":[{"id":"CVE-2024-26281","description":"Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS \u003c 123.","status":"published","published":"2024-02-22T14:56:45.803Z","modified":"2024-11-20T16:31:49.439Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:33:59.512321Z"}],"euvd":[{"id":"EUVD-2024-23552","description":"Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS \u003c 123.","status":"published","published":"2024-02-22T14:56:45Z","modified":"2024-11-20T16:31:49Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:54.237682Z"}],"ghsa":[{"id":"GHSA-7hw4-x97q-5wx2","title":"Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed...","description":"Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS \u003c 123.","status":"published","published":"2024-02-22T15:30:39Z","modified":"2024-11-20T18:32:14Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:58:53.680904Z"}],"nvd":[{"id":"CVE-2024-26281","description":"Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS \u003c 123.","status":"published","published":"2024-02-22T15:15:08.633Z","modified":"2026-06-17T07:17:32.11Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:37.655131Z"}]}}