8 results · Clear filters · Feed
-
High 8.8
Privilege escalation in Firefox for iOS
Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
High 7.3
Other issue in Firefox for iOS
Other issue in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
High 8.8
Privilege escalation in the Reader View component in Firefox for iOS
Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
High 8.8
Universal XSS via the HTML language attribute in Translation Services
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability w…
-
High 7.5
Malicious scripts could spam popups for denial of service attacks
Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.
-
High 7.5
If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed conten…
-
High 7.1
Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. T…
-
High 7.8
An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an externa…