Mozilla Firefox for iOS

• CVE-2026-116631 Medium 5.4 External protocol handler (tel:) address bar spoof 0.2%
• CVE-2026-116632 Medium 5.4 Facetime protocol handler enabled spoofing 0.2%
• CVE-2026-103417 Medium 5.5 Saved credentials can be autofilled after cross-origin navigation <0.1%
• CVE-2026-103418 High 8.8 Universal XSS via the HTML language attribute in Translation Services 0.3%
• CVE-2026-86853 Medium 4.3 Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS 0.3%
• CVE-2026-81267 Medium 5.4 Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS 0.3%
• CVE-2026-14906 Medium 5.3 Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS 0.3%
• CVE-2026-13356 Medium 6.3 Interrupted navigation could allow address bar origin spoofing in Firefox for iOS 0.2%
• CVE-2026-53900 Medium 4.3 Cookie injection was possible when opening a PDF link 0.1%
• CVE-2026-53899 Medium 6.5 Cross-origin cookies could be leaked when opening a PDF link <0.1%
• CVE-2026-9309 Medium 5.4 Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injection 0.2%
• CVE-2026-9308 Medium 5.4 Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order 0.2%
• CVE-2026-9078 Medium 5.4 Firefox iOS RTL Domain Rendering Issue in Link Preview 0.2%
• CVE-2026-8706 Medium 6.5 Sensitive user data could be leaked to other applications through Reader mode 0.2%
• CVE-2026-2634 Critical 9.8 Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS 0.4%
• CVE-2026-2032 Medium 4.3 Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS 0.2%
• CVE-2025-14744 Medium 6.5 Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS 0.2%
• CVE-2025-10859 Medium 4.0 Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs 0.1%
• CVE-2025-55029 High 7.5 Malicious scripts could spam popups for denial of service attacks 0.3%
• CVE-2025-55031 Critical 9.8 Passkey phishing within Bluetooth range 0.4%
• CVE-2025-55028 Medium 6.5 JavaScript alerts could impede UI interaction or allow denial of service attacks 0.2%
• CVE-2025-55030 Medium 6.1 Content-Disposition headers incorrectly ignored for some MIME types 0.2%
• CVE-2025-54145 Critical 9.1 Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites 0.4%
• CVE-2025-54144 Medium 5.4 Internal Firefox open-text URL scheme allowed loading of arbitrary URLs 0.2%
• CVE-2025-54143 Critical 9.8 Sandboxed iframes could allow local downloads despite sandbox restrictions 0.5%
• CVE-2025-5020 Medium 4.3 Links using non-HTTP schemes opened from other apps such as Safari could have allowed spoofing of website addresses 0.2%
• CVE-2025-27425 Medium 4.3 QR code user confirmation bypass with invalid protocol 0.2%
• CVE-2025-27424 Medium 4.3 Firefox Mobile iOS Address Bar Spoof Using Server-Side Redirect to non-http Scheme 0.3%
• CVE-2025-27426 Medium 5.4 Firefox Mobile iOS Full Address Bar Spoof Using Server-Side Redirect to internal error page 0.2%
• CVE-2025-23109 Medium 6.5 Address bar spoofing on iOS using long hostnames 0.2%
• CVE-2025-23108 Medium 4.3 Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI 0.2%
• CVE-2024-53976 Medium 5.4 Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, making it unclear what the URL was for the loaded webpage. This vulnerability affect 0.3%
• CVE-2024-53975 Medium 5.4 Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS < 133. 0.3%
• CVE-2024-10004 Critical 9.1 Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This 0.4%
• CVE-2024-43111 Critical 9.8 Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129. 0.3%
• CVE-2024-43113 Medium 6.1 The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS < 129. 0.3%
• CVE-2024-43112 Medium 6.1 Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129. 0.3%
• CVE-2024-38312 Medium 6.5 When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects 0.3%
• CVE-2024-38313 Medium 4.3 In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127. 0.2%
• CVE-2024-31392 High 7.5 If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status This vulnerability affects Firefox for iOS < 124. 0.4%
• CVE-2024-31393 Medium 4.3 Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS < 124. 0.3%
• CVE-2024-26281 Medium 4.7 Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS 0.3%
• CVE-2024-26282 High 7.1 Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. This vulnerability affects Firefox for iOS < 123. 0.3%
• CVE-2024-26283 High 7.8 An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme. This vulnerability affects Firefox for iOS < 0.3%
• CVE-2024-0953 Medium 6.1 When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them 0.3%
• CVE-2023-49061 Unrated An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120. 0.3%
• CVE-2023-49060 Unrated An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120. 0.6%
• CVE-2023-5758 Medium 6.1 When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iO 0.5%
• CVE-2023-37456 Unrated The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115. 0.5%
• CVE-2023-37455 Unrated The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for iOS < 115. 0.3%