CVE-2026-11799

Name of the Vulnerable Software and Affected Versions Focus for iOS versions prior to 151.3.1 Klar for iOS versions prior to 151.3.1

Description Universal Cross-Site Scripting (UXSS) exists in the Webkit navigation of Focus for iOS and Klar for iOS. UXSS is a security flaw that allows an attacker to execute malicious scripts across different origins, bypassing the Same-Origin Policy (SOP), which is a critical security mechanism that prevents websites from interacting with data from other websites.

Recommendations Update Focus for iOS to version 151.3.1. Update Klar for iOS to version 151.3.1.