PT-2026-49700

CVE-2026-53899

·

Published

2026-06-16

·

Updated

2026-06-17

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 152.0
Description Firefox for iOS used partial domain matching when attaching cookies to PDF requests. This behavior allows a malicious site hosted on a suffix domain to receive cookies belonging to the target site, leading to cookie leakage.
Recommendations Update to version 152.0.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-345: Insufficient Verification of Data Authenticity
Related identifiers
CVE-2026-53899
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com