6.1
Moyenne
CVE-2024-0606 An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a…
Description
An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Focus for iOS 122 | premières → < 122 | 122 |
Références
- bugzilla.mozilla.org bugzilla.mozilla.org
- www.mozilla.org www.mozilla.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Focus for iOS
Les 13 CVE de Focus for iOS →
CVE-2026-11799
UXSS in Focus for iOS / Klar Webkit navigation
7.5
Élevée
CVE-2026-2919
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a…
4.3
Moyenne
CVE-2025-10290
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh…
6.5
Moyenne
CVE-2025-55033
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially…
6.1
Moyenne