Summary
Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox iOS ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Cross-site-scripting Angriffe durchzuführen.
Product
Firefox ist ein Open Source Web Browser.
Vulnerabilities 2
-
High 8.8
Universal XSS via the HTML language attribute in Translation Services
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability w…
-
Medium 5.5
Saved credentials can be autofilled after cross-origin navigation
Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox…
Revision history
-
#1
Initiale Fassung
References
-
Mozilla Security Advisory mfsa2026-105 vom 2026-10-12
https://www.mozilla.org/en-US/security/advisories/mfsa2026-105/