Description
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page. This vulnerability was fixed in Firefox for iOS 141.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mozilla | Firefox for iOS | — | 141 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | firefox | 141-r0 | — |
Advisories 2
- WID-SEC-2025-1623 Mozilla Firefox , Firefox ESR und Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2026
- NCSC-2025-0235 Kwetsbaarheden verholpen in Firefox en Thunderbird NCSC-NL (Netherlands) · Jul 23, 2025