Azza Tegar Naufal Ataullah

**Name of the Vulnerable Software and Affected Versions** Firefox for iOS versions prior to 152.3 **Description** A malicious webpage can interrupt a pending navigation by enqueuing a synchronous JavaScript dialog. This action causes the browser user interface to display the destination origin in the address bar while the browser continues to render content controlled by the attacker. **Recommendations** Update Firefox for iOS to version 152.3.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 149.0.7827.53 **Description** Incorrect security UI in the File Input component allows a remote attacker to perform UI spoofing via a crafted HTML page, provided they can convince a user to perform specific UI gestures. **Recommendations** Update to version 149.0.7827.53 or later.