Description
Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mozilla | Firefox for iOS | — | 157.1 |
Advisories 1
- WID-SEC-2026-3879 Mozilla Firefox iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2026