Firefox For Ios
Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:firefox_for_ios:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Firefox For Ios (918cdec7-4acb-5bb8-a0d3-eecab3c4a35e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9309 |
not_vulnerable | 2026-06-08 08:08:58.903727 |
Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injection
Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata. A malicious page could inject markup that changed Reader View behavior and leaked sensitive URL parameters. These parameters could then be used to access internal pages, potentially resulting in arbitrary JavaScript execution in an internal origin. This vulnerability was fixed in Firefox for iOS 151.2.
Published: 2026-06-01T11:24:10.163Z
Updated: 2026-06-01T13:51:37.592Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9308 |
not_vulnerable | 2026-06-08 08:08:58.903598 |
Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order
Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. This vulnerability was fixed in Firefox for iOS 151.2.
Published: 2026-06-01T11:24:09.708Z
Updated: 2026-06-01T13:52:59.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9078 |
not_vulnerable | 2026-06-08 08:08:58.826618 |
Firefox iOS RTL Domain Rendering Issue in Link Preview
Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This vulnerability was fixed in Firefox for iOS 151.1.
Published: 2026-05-25T14:05:47.780Z
Updated: 2026-05-26T20:09:11.212Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8706 |
not_vulnerable | 2026-06-08 08:08:58.558662 |
Sensitive user data could be leaked to other applications through Reader mode
Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the response rendered with the signed-in user's cookies. This vulnerability was fixed in Firefox for iOS 151.0.
Published: 2026-05-19T14:27:38.483Z
Updated: 2026-05-19T17:12:23.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2634 |
not_vulnerable | 2026-06-08 07:55:17.313695 |
Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS
Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4.
Published: 2026-02-24T13:33:24.725Z
Updated: 2026-04-13T13:53:52.498Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2032 |
not_vulnerable | 2026-06-08 07:55:16.412099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5020 |
not_vulnerable | 2026-06-08 07:35:23.923011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55031 |
not_vulnerable | 2026-06-08 07:33:13.982866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55030 |
not_vulnerable | 2026-06-08 07:33:13.982446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55029 |
not_vulnerable | 2026-06-08 07:33:13.982180 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55028 |
not_vulnerable | 2026-06-08 07:33:13.981881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54145 |
not_vulnerable | 2026-06-08 07:33:11.640494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54144 |
not_vulnerable | 2026-06-08 07:33:11.640196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54143 |
not_vulnerable | 2026-06-08 07:33:11.638657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27426 |
not_vulnerable | 2026-06-08 07:14:54.921339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27425 |
not_vulnerable | 2026-06-08 07:14:54.920614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27424 |
not_vulnerable | 2026-06-08 07:14:54.916849 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23109 |
not_vulnerable | 2026-06-08 07:10:55.204817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23108 |
not_vulnerable | 2026-06-08 07:10:55.203462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14744 |
not_vulnerable | 2026-06-08 07:06:35.081506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10859 |
not_vulnerable | 2026-06-08 07:02:27.637441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53976 |
vulnerable | 2026-06-08 06:54:15.792570 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53975 |
vulnerable | 2026-06-08 06:54:15.790998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43113 |
vulnerable | 2026-06-08 06:45:49.600539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43112 |
vulnerable | 2026-06-08 06:45:49.600062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43111 |
vulnerable | 2026-06-08 06:45:49.598280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38313 |
vulnerable | 2026-06-08 06:41:45.006687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38312 |
vulnerable | 2026-06-08 06:41:45.005479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31393 |
vulnerable | 2026-06-08 06:35:31.426541 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31392 |
vulnerable | 2026-06-08 06:35:31.424093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26283 |
vulnerable | 2026-06-08 06:31:26.251288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26282 |
vulnerable | 2026-06-08 06:31:26.246990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26281 |
vulnerable | 2026-06-08 06:31:26.243194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10004 |
vulnerable | 2026-06-08 06:22:03.339373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0953 |
vulnerable | 2026-06-08 06:22:03.203914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5758 |
vulnerable | 2026-06-08 06:19:44.659909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49061 |
vulnerable | 2026-06-08 06:14:28.367550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49060 |
vulnerable | 2026-06-08 06:14:28.366241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37456 |
vulnerable | 2026-06-08 06:08:15.314166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37455 |
vulnerable | 2026-06-08 06:08:15.312881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31746 |
vulnerable | 2026-06-08 05:44:41.673278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1887 |
vulnerable | 2026-06-08 05:39:14.062873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29958 |
vulnerable | 2026-06-08 05:31:27.272334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6830 |
vulnerable | 2026-06-08 05:26:45.728492 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15662 |
vulnerable | 2026-06-08 05:19:26.304522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15661 |
vulnerable | 2026-06-08 05:19:26.302940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15651 |
vulnerable | 2026-06-08 05:19:26.289481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12414 |
vulnerable | 2026-06-08 05:17:58.142401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12404 |
vulnerable | 2026-06-08 05:17:58.137317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17003 |
under_investigation | 2026-06-08 05:13:09.737071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.