Vulnerability Details CVE-2026-2919
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability was fixed in Focus for iOS 148.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.6%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2026-2919
-
cpe:2.3:a:mozilla:firefox_focus:-
-
cpe:2.3:a:mozilla:firefox_focus:100.0
-
cpe:2.3:a:mozilla:firefox_focus:102.0
-
cpe:2.3:a:mozilla:firefox_focus:103.0
-
cpe:2.3:a:mozilla:firefox_focus:104.0
-
cpe:2.3:a:mozilla:firefox_focus:105.0
-
cpe:2.3:a:mozilla:firefox_focus:106.0
-
cpe:2.3:a:mozilla:firefox_focus:107.0
-
cpe:2.3:a:mozilla:firefox_focus:107.1
-
cpe:2.3:a:mozilla:firefox_focus:108.0
-
cpe:2.3:a:mozilla:firefox_focus:108.1
-
cpe:2.3:a:mozilla:firefox_focus:109.0
-
cpe:2.3:a:mozilla:firefox_focus:110.0
-
cpe:2.3:a:mozilla:firefox_focus:111.0
-
cpe:2.3:a:mozilla:firefox_focus:111.1
-
cpe:2.3:a:mozilla:firefox_focus:112.0
-
cpe:2.3:a:mozilla:firefox_focus:113.0
-
cpe:2.3:a:mozilla:firefox_focus:114.0
-
cpe:2.3:a:mozilla:firefox_focus:115.0
-
cpe:2.3:a:mozilla:firefox_focus:116.0
-
cpe:2.3:a:mozilla:firefox_focus:117.0
-
cpe:2.3:a:mozilla:firefox_focus:118.0
-
cpe:2.3:a:mozilla:firefox_focus:119.0
-
cpe:2.3:a:mozilla:firefox_focus:120.0
-
cpe:2.3:a:mozilla:firefox_focus:121.0
-
cpe:2.3:a:mozilla:firefox_focus:122.0
-
cpe:2.3:a:mozilla:firefox_focus:122.1
-
cpe:2.3:a:mozilla:firefox_focus:123.0
-
cpe:2.3:a:mozilla:firefox_focus:124.0
-
cpe:2.3:a:mozilla:firefox_focus:124.1
-
cpe:2.3:a:mozilla:firefox_focus:125.0
-
cpe:2.3:a:mozilla:firefox_focus:126.0
-
cpe:2.3:a:mozilla:firefox_focus:126.1
-
cpe:2.3:a:mozilla:firefox_focus:127.0
-
cpe:2.3:a:mozilla:firefox_focus:128.0
-
cpe:2.3:a:mozilla:firefox_focus:129.0
-
cpe:2.3:a:mozilla:firefox_focus:129.2
-
cpe:2.3:a:mozilla:firefox_focus:130.0
-
cpe:2.3:a:mozilla:firefox_focus:131.0
-
cpe:2.3:a:mozilla:firefox_focus:131.1
-
cpe:2.3:a:mozilla:firefox_focus:132.0
-
cpe:2.3:a:mozilla:firefox_focus:133.0
-
cpe:2.3:a:mozilla:firefox_focus:138.0
-
cpe:2.3:a:mozilla:firefox_focus:142.0