Skip to contentMozilla Firefox For Ios vulnerabilities
- mozilla firefox for iosPrivilege escalation in Firefox for iOSCVE-2026-1218438.8 High
- mozilla firefox for iosOther issue in Firefox for iOSCVE-2026-1218417.3 High
- mozilla firefox for iosPrivilege escalation in the Reader View component in Firefox for iOSCVE-2026-1218428.8 High
- mozilla firefox for iosExternal protocol handler (tel:) address bar spoofCVE-2026-1166315.4 Medium
- mozilla firefox for iosFacetime protocol handler enabled spoofingCVE-2026-1166325.4 Medium
- mozilla firefox for iosSaved credentials can be autofilled after cross-origin navigationCVE-2026-1034175.5 Medium
- mozilla firefox for iosUniversal XSS via the HTML language attribute in Translation ServicesCVE-2026-1034188.8 High
- mozilla firefox for ios, firefox mobile +1 moreRepeated external URL scheme launches could potentially cause a denial of service in Firefox for iOSCVE-2026-868534.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreStalled popup navigation could allow address bar origin spoofing in Firefox for iOSCVE-2026-812675.4 Medium
- mozilla firefox for ios, firefox mobile +1 moreMalicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOSCVE-2026-149065.3 Medium
- mozilla firefox, firefox for ios +1 moreInterrupted navigation could allow address bar origin spoofing in Firefox for iOSCVE-2026-133566.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreCookie injection was possible when opening a PDF linkCVE-2026-539004.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreCross-origin cookies could be leaked when opening a PDF linkCVE-2026-538996.5 Medium
- mozilla firefox, firefox for ios +1 moreArbitrary JavaScript execution in internal pages via Reader View JSON-LD injectionCVE-2026-93095.4 Medium
- mozilla firefox, firefox for ios +1 moreArbitrary JavaScript execution in Reader View due to wrong HTML replacement orderCVE-2026-93085.4 Medium
- mozilla firefox, firefox for ios +1 moreFirefox iOS RTL Domain Rendering Issue in Link PreviewCVE-2026-90785.4 Medium
- mozilla firefox, firefox for ios +1 moreSensitive user data could be leaked to other applications through Reader modeCVE-2026-87066.5 Medium
- mozilla firefox, firefox for ios +1 moreSpoofed web content presented under trusted domains using scripted navigation on Firefox iOSCVE-2026-26349.8 Critical
- mozilla firefox, firefox for ios +1 moreInterrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOSCVE-2026-20324.3 Medium
- mozilla firefox, firefox for ios +1 moreFilename spoofing via Unicode Right-to-Left Override in Firefox for iOSCVE-2025-147446.5 Medium
- mozilla firefox, firefox for ios +1 moreData stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabsCVE-2025-108594.0 Medium
- mozilla firefox, firefox for ios +1 moreMalicious scripts could spam popups for denial of service attacksCVE-2025-550297.5 High
- mozilla firefox, firefox for ios, focus for ios +1 more +3 morePasskey phishing within Bluetooth rangeCVE-2025-550319.8 Critical
- mozilla firefox, firefox for ios +1 moreJavaScript alerts could impede UI interaction or allow denial of service attacksCVE-2025-550286.5 Medium
- mozilla firefox, firefox for ios +1 moreContent-Disposition headers incorrectly ignored for some MIME typesCVE-2025-550306.1 Medium
- mozilla firefox, firefox for ios +1 moreScanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websitesCVE-2025-541459.1 Critical
- mozilla firefox, firefox for ios +1 moreInternal Firefox open-text URL scheme allowed loading of arbitrary URLsCVE-2025-541445.4 Medium
- mozilla firefox, firefox for ios +1 moreSandboxed iframes could allow local downloads despite sandbox restrictionsCVE-2025-541439.8 Critical
- mozilla firefox, firefox for ios +1 moreLinks using non-HTTP schemes opened from other apps such as Safari could have allowed spoofing of website addressesCVE-2025-50204.3 Medium
- mozilla firefox, firefox for ios +1 moreQR code user confirmation bypass with invalid protocolCVE-2025-274254.3 Medium
- mozilla firefox, firefox for ios +1 moreFirefox Mobile iOS Address Bar Spoof Using Server-Side Redirect to non-http SchemeCVE-2025-274244.3 Medium
- mozilla firefox, firefox for ios +1 moreFirefox Mobile iOS Full Address Bar Spoof Using Server-Side Redirect to internal error pageCVE-2025-274265.4 Medium
- mozilla firefox, firefox for ios +1 moreAddress bar spoofing on iOS using long hostnamesCVE-2025-231096.5 Medium
- mozilla firefox, firefox for ios +1 moreFirefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URICVE-2025-231084.3 Medium
- mozilla firefox, firefox for ios +1 moreUnder certain circumstances, navigating to a webpage would result in the address missing from the...CVE-2024-539765.4 Medium
- mozilla firefox, firefox for ios +1 moreAccessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in...CVE-2024-539755.4 Medium
- mozilla firefox, firefox for ios +1 moreOpening an external link to an HTTP website when Firefox iOS was previously closed and had an...CVE-2024-100049.1 Critical
- mozilla firefox for ios, firefox mobile +1 moreLong pressing on a download link could potentially allow Javascript commands to be executed...CVE-2024-431116.1 Medium
- mozilla firefox for ios, firefox mobile +1 moreThe contextual menu for links could provide an opportunity for cross-site scripting attacks This...CVE-2024-431136.1 Medium
- mozilla firefox for ios, firefox mobile +1 moreLong pressing on a download link could potentially provide a means for cross-site scripting This...CVE-2024-431126.1 Medium
- mozilla firefox for ios, firefox mobile +1 moreIn certain scenarios a malicious website could attempt to display a fake location URL bar which...CVE-2024-383134.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreWhen browsing private tabs, some data related to location history or webpage thumbnails could be...CVE-2024-383126.5 Medium
- mozilla firefox, firefox for ios +1 moreDragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions...CVE-2024-313934.3 Medium
- mozilla firefox, firefox for ios +1 moreIf an insecure element was added to a page after a delay, Firefox would not replace the secure...CVE-2024-313927.5 High
- mozilla firefox, firefox for ios +1 moreUpon scanning a JavaScript URI with the QR code scanner, an attacker could have executed...CVE-2024-262814.7 Medium
- mozilla firefox, firefox for ios +1 moreUsing an AMP url with a canonical element, an attacker could have executed JavaScript from an...CVE-2024-262827.1 High
- mozilla firefox, firefox for ios +1 moreAn attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI...CVE-2024-262837.8 High
- mozilla firefox for ios, firefox mobile +1 moreWhen a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before...CVE-2024-09536.1 Medium
- mozilla firefox for ios, firefox mobile +1 moreAn attacker could have performed HTML template injection via Reader Mode and exfiltrated user...CVE-2023-490616.1 Medium
- mozilla firefox for ios, firefox mobile +1 moreAn attacker could have accessed internal pages or data by ex-filtrating a security key from...CVE-2023-490609.8 Critical
- Show olderLoading…