| CVE-2026-2634 |
Malicious scripts could cause desynchronization between the address bar and web content before a response is received in…
|
9.8
Critical
|
Feb 24, 2026 |
| CVE-2025-55031 |
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport
|
9.8
Critical
|
Aug 19, 2025 |
| CVE-2025-54145 |
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that…
|
9.1
Critical
|
Aug 19, 2025 |
| CVE-2025-54143 |
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox…
|
9.8
Critical
|
Aug 19, 2025 |
| CVE-2024-10004 |
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in…
|
9.1
Critical
|
Oct 15, 2024 |
| CVE-2024-43111 |
Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This…
|
9.8
Critical
|
Aug 6, 2024 |
| CVE-2022-1887 |
The search term could have been specified externally to trigger SQL injection
|
9.8
Critical
|
Dec 22, 2022 |