Firefox for iOS vulnerabilities
9 known vulnerabilities in Firefox for iOS from Mozilla. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Firefox for iOS: Improper Neutralization of Input During Web Page Generation
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability wa
- 9.8 Critical severity
Firefox for iOS: User Interface (UI) Misrepresentation of Critical Information
Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.
- 9.8 Critical severity
Firefox for iOS: URL Redirection to Untrusted Site
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target
- 7.5 High severity
Firefox for iOS: Uncontrolled Resource Consumption
Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.
- 9.1 Critical severity
Firefox for iOS: URL Redirection to Untrusted Site
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141.
- 9.8 Critical severity
Firefox for iOS: Protection Mechanism Failure
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page. This vulnerability was fixed in Firefox for iOS 141.
- 9.1 Critical severity
Firefox for iOS: Improper Restriction of Rendered UI Layers or Frames
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
- 7.8 High severity
Firefox for iOS: Improper Neutralization of Script in Attributes in a Web Page
An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme. This vulnerability affects Firefox for iOS < 123.
- 7.1 High severity
Firefox for iOS: Improper Neutralization of Script-Related HTML Tags in a Web Page
Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. This vulnerability affects Firefox for iOS < 123.