Skip to content

Vulnerabilities of Mozilla Focus for iOS

Is your version affected?

CVE Summary Score Published
CVE-2026-11799 UXSS in Focus for iOS / Klar Webkit navigation 7.5 High Jun 9, 2026
CVE-2026-2919 Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a… 4.3 Medium Mar 9, 2026
CVE-2025-10290 Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh… 6.5 Medium Sep 16, 2025
CVE-2025-55033 Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially… 6.1 Medium Aug 19, 2025
CVE-2025-55032 Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the… 6.1 Medium Aug 19, 2025
CVE-2025-55031 Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport 9.8 Critical Aug 19, 2025
CVE-2024-10474 Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in… 9.1 Critical Oct 29, 2024
CVE-2024-8399 Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects… 4.7 Medium Sep 3, 2024
CVE-2024-5022 The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in the location bar This… 4.4 Medium May 17, 2024
CVE-2024-26284 Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim… 6.1 Medium Feb 22, 2024
CVE-2024-1563 An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external… 8.1 High Feb 22, 2024
CVE-2024-0606 An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a… 6.1 Medium Jan 22, 2024
CVE-2024-0605 Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin… 7.5 High Jan 22, 2024

Other Mozilla products