Skip to contentMozilla Focus For Ios vulnerabilities
- mozilla focus, focus for ios, klar +1 more +3 moreUXSS in Focus for iOS / Klar Webkit navigationCVE-2026-117997.5 High
- mozilla focus for ios, firefox focus +1 moreAttacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirectCVE-2026-29194.3 Medium
- mozilla focus for ios, firefox focus +1 moreOpening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websitesCVE-2025-102906.5 Medium
- mozilla focus for ios, firefox focus +1 moreDrag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectlyCVE-2025-550336.1 Medium
- mozilla focus for ios, firefox focus +1 moreFocus incorrectly ignores Content-Disposition headers for some MIME typesCVE-2025-550326.1 Medium
- mozilla firefox, firefox for ios, focus for ios +1 more +3 morePasskey phishing within Bluetooth rangeCVE-2025-550319.8 Critical
- mozilla focus for ios, firefox focus +1 moreFocus was incorrectly allowing internal links to utilize the app scheme used for deeplinking,...CVE-2024-104746.5 Medium
- mozilla focus for ios, firefox focus +1 moreWebsites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This...CVE-2024-83994.7 Medium
- mozilla focus for ios, firefox focus +1 moreThe file scheme of URLs would be hidden, resulting in potential spoofing of a website's address...CVE-2024-50224.4 Medium
- mozilla focus for ios, firefox focus +1 moreUtilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS...CVE-2024-262846.1 Medium
- mozilla focus for ios, firefox focus +1 moreAn attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI...CVE-2024-15638.1 High
- mozilla focus for ios, firefox focus +1 moreAn attacker could execute unauthorized script on a legitimate site through UXSS using window.open...CVE-2024-06066.1 Medium
- mozilla focus for ios, firefox focus +1 moreUsing a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized...CVE-2024-06057.5 High