Irwan

**Name of the Vulnerable Software and Affected Versions** Firefox for iOS versions prior to 119 **Description** The issue is related to the reader mode in Firefox, where the structure of a web page is not properly protected, allowing for potential exploitation. This could lead to a reflected Cross-Site Scripting (XSS) attack, where an attacker-controlled script could execute when a page is opened in reader mode. The attack is conducted through a redirect URL. **Recommendations** For Firefox for iOS versions prior to 119: Update to version 119 or later to resolve the issue. As a temporary workaround, consider avoiding the use of reader mode until the update is applied. Restrict access to potentially malicious websites to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Firefox for Android versions prior to 112 Focus for Android versions prior to 112 **Description** The issue occurs when recording the screen while in Private Browsing on Firefox for Android, where the address bar and keyboard are not hidden, potentially leaking sensitive information. This bug only affects Firefox for Android, and other operating systems are unaffected. **Recommendations** For Firefox for Android versions prior to 112, update to version 112 or later to resolve the issue. For Focus for Android versions prior to 112, update to version 112 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 103 Firefox for Android versions prior to 103 **Description** The issue exists due to insufficient input validation. Exploitation can allow a remote attacker to cause a denial of service by visiting a website with an overly long URL, potentially causing the user interface to hang. This could lead to a permanent denial of service due to session restore. The issue only affects Firefox for Android, with other operating systems being unaffected. **Recommendations** For Firefox versions prior to 103, update to version 103 or later to resolve the issue. For Firefox for Android versions prior to 103, update to version 103 or later to resolve the issue. As a temporary workaround, consider avoiding websites with overly long URLs until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Firefox for Android versions prior to 95 **Description** The issue arises when Firefox for Android receives a URL through a SEND intent. Instead of directly loading the URL, Firefox would initially search for the text. However, subsequent uses of the address bar could cause the URL to load unintentionally. This unintended loading could lead to cross-site scripting (XSS) and spoofing attacks. It's noted that this issue only affects Firefox for Android, with other operating systems being unaffected. **Recommendations** For versions prior to 95, update to version 95 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the address bar after receiving a URL through a SEND intent until a patch is applied.