| CVE-2026-116631 |
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call…
|
5.4
Medium
|
Oct 26, 2026 |
| CVE-2026-116632 |
A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to…
|
5.4
Medium
|
Oct 26, 2026 |
| CVE-2026-103417 |
Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the…
|
5.5
Medium
|
Oct 13, 2026 |
| CVE-2026-103418 |
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing…
|
8.8
High
|
Oct 13, 2026 |
| CVE-2026-86853 |
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application…
|
4.3
Medium
|
Sep 8, 2026 |
| CVE-2026-81267 |
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the…
|
5.4
Medium
|
Aug 31, 2026 |
| CVE-2026-14906 |
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within…
|
5.3
Medium
|
Jul 13, 2026 |
| CVE-2026-13356 |
A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the…
|
6.3
Medium
|
Jul 6, 2026 |
| CVE-2026-53900 |
Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in…
|
4.3
Medium
|
Jun 16, 2026 |
| CVE-2026-53899 |
Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a…
|
6.5
Medium
|
Jun 16, 2026 |
| CVE-2026-9309 |
Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata
|
5.4
Medium
|
Jun 1, 2026 |
| CVE-2026-9308 |
Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders
|
5.4
Medium
|
Jun 1, 2026 |
| CVE-2026-9078 |
Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in…
|
5.4
Medium
|
May 25, 2026 |
| CVE-2026-8706 |
Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same…
|
6.5
Medium
|
May 19, 2026 |
| CVE-2026-2634 |
Malicious scripts could cause desynchronization between the address bar and web content before a response is received in…
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2026-2032 |
Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page…
|
4.3
Medium
|
Feb 16, 2026 |
| CVE-2025-14744 |
Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS,…
|
6.5
Medium
|
Dec 18, 2025 |
| CVE-2025-10859 |
Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing…
|
4.0
Medium
|
Sep 30, 2025 |
| CVE-2025-55029 |
Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks
|
7.5
High
|
Aug 19, 2025 |
| CVE-2025-55031 |
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport
|
9.8
Critical
|
Aug 19, 2025 |
| CVE-2025-55028 |
Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and…
|
6.5
Medium
|
Aug 19, 2025 |
| CVE-2025-55030 |
Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the…
|
6.1
Medium
|
Aug 19, 2025 |
| CVE-2025-54145 |
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that…
|
9.1
Critical
|
Aug 19, 2025 |
| CVE-2025-54144 |
The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open…
|
5.4
Medium
|
Aug 19, 2025 |
| CVE-2025-54143 |
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox…
|
9.8
Critical
|
Aug 19, 2025 |