Yuyang Zhou

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.

The issue involves the Safari component and allows remote attackers to spoof the address bar via a crafted web site.

The issue involves the Safari component and allows remote attackers to spoof the address bar by leveraging text input during the loading of a page.

The issue is related to a same-origin policy bypass that can be exploited using local shortcut files, allowing the loading of arbitrary local content from disk.