| CVE-2026-11799 |
UXSS in Focus for iOS / Klar Webkit navigation
|
7.5
Élevée
|
9 juin 2026 |
| CVE-2026-2919 |
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a…
|
4.3
Moyenne
|
9 mars 2026 |
| CVE-2025-10290 |
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh…
|
6.5
Moyenne
|
16 sept. 2025 |
| CVE-2025-55033 |
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially…
|
6.1
Moyenne
|
19 août 2025 |
| CVE-2025-55032 |
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the…
|
6.1
Moyenne
|
19 août 2025 |
| CVE-2025-55031 |
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport
|
9.8
Critique
|
19 août 2025 |
| CVE-2024-10474 |
Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in…
|
9.1
Critique
|
29 oct. 2024 |
| CVE-2024-8399 |
Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects…
|
4.7
Moyenne
|
3 sept. 2024 |
| CVE-2024-5022 |
The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in the location bar This…
|
4.4
Moyenne
|
17 mai 2024 |
| CVE-2024-26284 |
Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim…
|
6.1
Moyenne
|
22 févr. 2024 |
| CVE-2024-1563 |
An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external…
|
8.1
Élevée
|
22 févr. 2024 |
| CVE-2024-0606 |
An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a…
|
6.1
Moyenne
|
22 janv. 2024 |
| CVE-2024-0605 |
Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin…
|
7.5
Élevée
|
22 janv. 2024 |