5.4
Moyenne
CVE-2026-116631 A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call…
Description
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Firefox for iOS 156.1 | premières → < 156.1 | 156.1 |
Références
- bugzilla.mozilla.org bugzilla.mozilla.org
- www.mozilla.org www.mozilla.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Firefox for iOS
Les 60 CVE de Firefox for iOS →
CVE-2026-116632
A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to…
5.4
Moyenne
CVE-2026-103417
Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the…
5.5
Moyenne
CVE-2026-103418
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing…
8.8
Élevée
CVE-2026-86853
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application…
4.3
Moyenne