PT-2026-43074

CVE-2026-9078

Published

2026-05-25

Updated

2026-05-29

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 151.1

Description Firefox for iOS incorrectly displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) within link preview UI surfaces. A crafted RTL hostname could visually reorder parts of the displayed domain, potentially making attacker-controlled sites appear as trusted origins.

Recommendations Update to version 151.1.

Exploitability

Fix

Impacts

Researchers

Barath Stalin K

Vendors

Affected products

Weakness enumeration

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2026-9078