Description
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mozilla | Firefox for iOS | — | 156.1 |
Advisories 1
- WID-SEC-2026-4167 Mozilla Firefox (iOS): Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen BSI CERT-Bund (WID) · Oct 26, 2026