Description
A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mozilla | Firefox for iOS | — | 152.3 |
Advisories 1
- WID-SEC-2026-2214 Mozilla Firefox für iOS: Schwachstelle ermöglicht Darstellen falscher Informationen BSI CERT-Bund (WID) · Jul 6, 2026