Skip to content
OpenAdvisories
Medium WID-SEC-2026-4167 2 CVEs

Mozilla Firefox (iOS): Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen

Published Oct 26, 2026 · Updated Oct 26, 2026 · de-DE

Vendor: Mozilla Product: Firefox Platform: iOS

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Mozilla Firefox (iOS) ausnutzen, um falsche Informationen darzustellen.

Product

Firefox ist ein Open Source Web Browser.

Vulnerabilities 2

  • Medium 5.4
    CVE-2026-116631

    External protocol handler (tel:) address bar spoof

    A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.

    Mozilla Firefox for iOS iOS Browsers
  • Medium 5.4
    CVE-2026-116632

    Facetime protocol handler enabled spoofing

    A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.

    Mozilla Firefox for iOS iOS Browsers

Revision history

  1. #1

    Initiale Fassung

References