James Lee

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 141 Description: The QR scanner component is susceptible to exploitation, potentially allowing malicious websites to be opened. This occurs when a user scans a specially crafted link utilizing Firefox's open-text URL scheme. Recommendations: Update Firefox for iOS to version 141 or later.

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 141 Description: The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked into clicking a link. Recommendations: Update Firefox for iOS to version 141 or later.

The issue allows attackers to spoof website addresses when opening maliciously-crafted URLs in Firefox from other apps, such as Safari, if the URLs utilize non-HTTP schemes used internally by the Firefox iOS client.

Websites could leverage the truncating behavior of long URLs in the location view to potentially trick users into thinking they were on a different webpage.

When using an invalid protocol scheme, an attacker could spoof the address bar. This issue only affects Android operating systems, while other operating systems are unaffected.

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 133 Description: Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to appear secure misleadingly. Recommendations: For Firefox for iOS versions prior to 133, update to a version 133 or later to resolve the issue. As a temporary workaround, consider avoiding access to non-secure HTTP sites that use non-existent ports until the update is applied.

The issue allows internal links to utilize the app scheme used for deeplinking, potentially circumventing some URL safety checks. This could result in link spoofing.

A permission leak could occur from a trusted site to an untrusted site via `embed` or `object` elements. This issue is related to incorrect permission preservation. Exploitation of this issue may allow a remote attacker to impact the confidentiality of protected information.

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible.

The issue is related to the notification announcing the transition to fullscreen mode in Firefox on Android. Multiple prompts and panels from both Firefox and the Android OS could be used to obscure this notification, potentially leading to spoofing of the browser UI if the user is distracted by the sudden appearance of a prompt. The notifications now use the Android Toast feature. This issue only affects Firefox on Android, with other operating systems being unaffected.

Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 130 Description: Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar. Recommendations: For Focus for iOS versions prior to 130, update to version 130 or later to resolve the issue.

A potential issue exists where long pressing on a download link could provide a means for cross-site scripting.

The contextual menu for links in Firefox for iOS could provide an opportunity for cross-site scripting attacks.

A potential issue exists where long pressing on a download link could allow Javascript commands to be executed within the browser.

Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 126 Description: The issue is related to the file scheme of URLs being hidden, potentially allowing spoofing of a website's address in the location bar. This could enable a remote attacker to conduct spoofing attacks by exploiting errors in the representation of information in the user interface. Recommendations: For Focus for iOS versions prior to 126, update to version 126 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Microsoft Bing Search (affected versions not specified) Description: The issue is related to a data protection mechanism flaw in the Microsoft Bing Search system for the iOS operating system. This can be exploited by a remote attacker to conduct spoofing attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to inappropriate implementation in iOS, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This is due to insufficient access control, which can be exploited by a remote attacker to gain unauthorized access to protected information. The estimated number of potentially affected devices worldwide is not specified.

The issue was addressed with improved UI handling. A malicious website may exfiltrate audio data cross-origin.

This issue allows an attacker to conduct a Universal Cross-Site Scripting (UXSS) attack on a victim website using a 302 redirect, provided the victim has a link to the attacker's website.

An issue allows an attacker to execute unauthorized scripts on the current top origin sites in the URL bar when a JavaScript URI is scanned with the QR code scanner.