Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox_for_ios:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox For Ios (918cdec7-4acb-5bb8-a0d3-eecab3c4a35e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-86853 not_vulnerable 2026-09-16 04:32:58.773690 Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
Published: 2026-09-08T15:14:51.534Z
Updated: 2026-09-08T15:48:03.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-53900 not_vulnerable 2026-07-29 01:00:27.337417 Cookie injection was possible when opening a PDF link
Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0.
Published: 2026-06-16T11:53:05.773Z
Updated: 2026-06-16T14:37:32.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-53899 not_vulnerable 2026-07-29 01:00:27.337204 Cross-origin cookies could be leaked when opening a PDF link
Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. This vulnerability was fixed in Firefox for iOS 152.0.
Published: 2026-06-16T11:53:04.805Z
Updated: 2026-06-16T15:44:21.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14906 not_vulnerable 2026-07-29 00:26:17.651316 Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.
Published: 2026-07-13T18:27:03.771Z
Updated: 2026-07-13T19:32:16.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13356 not_vulnerable 2026-07-29 00:23:32.984877 Interrupted navigation could allow address bar origin spoofing in Firefox for iOS
A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3.
Published: 2026-07-06T23:07:42.721Z
Updated: 2026-07-07T13:27:01.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9309 not_vulnerable 2026-06-08 08:08:58.903727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9308 not_vulnerable 2026-06-08 08:08:58.903598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9078 not_vulnerable 2026-06-08 08:08:58.826618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8706 not_vulnerable 2026-06-08 08:08:58.558662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2634 not_vulnerable 2026-06-08 07:55:17.313695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2032 not_vulnerable 2026-06-08 07:55:16.412099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5020 not_vulnerable 2026-06-08 07:35:23.923011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55031 not_vulnerable 2026-06-08 07:33:13.982866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55030 not_vulnerable 2026-06-08 07:33:13.982446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55029 not_vulnerable 2026-06-08 07:33:13.982180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55028 not_vulnerable 2026-06-08 07:33:13.981881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54145 not_vulnerable 2026-06-08 07:33:11.640494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54144 not_vulnerable 2026-06-08 07:33:11.640196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54143 not_vulnerable 2026-06-08 07:33:11.638657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27426 not_vulnerable 2026-06-08 07:14:54.921339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27425 not_vulnerable 2026-06-08 07:14:54.920614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27424 not_vulnerable 2026-06-08 07:14:54.916849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23109 not_vulnerable 2026-06-08 07:10:55.204817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23108 not_vulnerable 2026-06-08 07:10:55.203462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14744 not_vulnerable 2026-06-08 07:06:35.081506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10859 not_vulnerable 2026-06-08 07:02:27.637441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53976 vulnerable 2026-06-08 06:54:15.792570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53975 vulnerable 2026-06-08 06:54:15.790998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43113 vulnerable 2026-06-08 06:45:49.600539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43112 vulnerable 2026-06-08 06:45:49.600062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43111 vulnerable 2026-06-08 06:45:49.598280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38313 vulnerable 2026-06-08 06:41:45.006687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38312 vulnerable 2026-06-08 06:41:45.005479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31393 vulnerable 2026-06-08 06:35:31.426541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31392 vulnerable 2026-06-08 06:35:31.424093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26283 vulnerable 2026-06-08 06:31:26.251288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26282 vulnerable 2026-06-08 06:31:26.246990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26281 vulnerable 2026-06-08 06:31:26.243194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10004 vulnerable 2026-06-08 06:22:03.339373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0953 vulnerable 2026-06-08 06:22:03.203914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5758 vulnerable 2026-06-08 06:19:44.659909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49061 vulnerable 2026-06-08 06:14:28.367550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49060 vulnerable 2026-06-08 06:14:28.366241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37456 vulnerable 2026-06-08 06:08:15.314166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37455 vulnerable 2026-06-08 06:08:15.312881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31746 vulnerable 2026-06-08 05:44:41.673278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1887 vulnerable 2026-06-08 05:39:14.062873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29958 vulnerable 2026-06-08 05:31:27.272334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6830 vulnerable 2026-06-08 05:26:45.728492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15662 vulnerable 2026-06-08 05:19:26.304522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15661 vulnerable 2026-06-08 05:19:26.302940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15651 vulnerable 2026-06-08 05:19:26.289481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12414 vulnerable 2026-06-08 05:17:58.142401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12404 vulnerable 2026-06-08 05:17:58.137317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17003 under_investigation 2026-06-08 05:13:09.737071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.