Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-116632 EUVD-2026-110067GHSA-mc33-f346-4jg7

Facetime protocol handler enabled spoofing

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by mozilla

Description

A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.

Affected products

VendorProductAffectedFixed
Mozilla Firefox for iOS — 156.1

Advisories 1

References