PT-2026-83973 · Mozilla · Firefox For Ios
CVE-2026-81267
·
Published
2026-08-31
·
Updated
2026-08-31
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
Firefox for iOS versions prior to 155.0
Description
A malicious webpage can stall cross-origin navigation in a popup after the commit phase. This allows the address bar to display the origin of the destination site while the browser continues to render content controlled by the attacker, leading to address bar origin spoofing.
Recommendations
Update Firefox for iOS to version 155.0.
Exploit
Fix
UI Misrepresentation of Critical Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firefox For Ios