Renwa

A spoofing issue exists within the Address Bar component, which could allow an attacker to deceive users by manipulating the displayed address.

A user interface misrepresentation allows an attacker to perform spoofing over a network.

A flaw exists in Firefox for iOS that could allow malicious scripts to cause a mismatch between the address bar display and the actual web content. This could lead to a user being presented with a webpage controlled by an attacker while believing they are on a legitimate, spoofed domain.

A spoofing issue exists in Microsoft Edge (Chromium-based). Information about this issue has been published.

Opening links via the contextual menu for certain URL schemes would fail to load, but the toolbar would not refresh correctly. This could allow attackers to spoof websites if users were coerced into opening a link explicitly through a long-press.

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 142 Description: Firefox for iOS did not correctly handle the `Content-Disposition` header of type `Attachment`, resulting in content being displayed inline instead of being downloaded. This behavior could potentially lead to cross-site scripting (XSS) attacks. Recommendations: Update to Firefox for iOS version 142 or later.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 142 Firefox ESR versions prior to 140.2 Description: A spoofing issue exists in the Address Bar component. Recommendations: Update Firefox to version 142 or later. Update Firefox ESR to version 140.2 or later.

Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 142 Description: Focus for iOS did not correctly handle `Content-Disposition` headers of type Attachment, leading to inline display of content. This behavior could potentially allow for cross-site scripting (XSS) attacks. Recommendations: Update to version 142 or later.

A spoofing issue exists where websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page.

The issue allows malicious websites to utilize a server-side redirect to an internal error page, resulting in a spoofed website URL.

The issue is related to a spoofing vulnerability in Microsoft Edge, where errors in presenting information to the user interface can be exploited. This can allow a remote attacker to conduct spoofing attacks.

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab.

The issue is related to errors in presenting information to the user interface, which can allow a remote attacker to conduct spoofing attacks.