| CVE-2026-2634 |
Malicious scripts could cause desynchronization between the address bar and web content before a response is received in…
|
9.8
Critique
|
24 févr. 2026 |
| CVE-2025-55031 |
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport
|
9.8
Critique
|
19 août 2025 |
| CVE-2025-54145 |
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that…
|
9.1
Critique
|
19 août 2025 |
| CVE-2025-54143 |
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox…
|
9.8
Critique
|
19 août 2025 |
| CVE-2024-10004 |
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in…
|
9.1
Critique
|
15 oct. 2024 |
| CVE-2024-43111 |
Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This…
|
9.8
Critique
|
6 août 2024 |
| CVE-2022-1887 |
The search term could have been specified externally to trigger SQL injection
|
9.8
Critique
|
22 déc. 2022 |