Vulnerability Details CVE-2026-81267
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 12.0%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2026-81267
-
cpe:2.3:a:mozilla:firefox_mobile:-
-
cpe:2.3:a:mozilla:firefox_mobile:102.0
-
cpe:2.3:a:mozilla:firefox_mobile:119.0
-
cpe:2.3:a:mozilla:firefox_mobile:120.0
-
cpe:2.3:a:mozilla:firefox_mobile:127.0
-
cpe:2.3:a:mozilla:firefox_mobile:129.0
-
cpe:2.3:a:mozilla:firefox_mobile:14.0
-
cpe:2.3:a:mozilla:firefox_mobile:147.0
-
cpe:2.3:a:mozilla:firefox_mobile:147.1
-
cpe:2.3:a:mozilla:firefox_mobile:147.2
-
cpe:2.3:a:mozilla:firefox_mobile:147.2.1
-
cpe:2.3:a:mozilla:firefox_mobile:147.3
-
cpe:2.3:a:mozilla:firefox_mobile:147.4
-
cpe:2.3:a:mozilla:firefox_mobile:147.5
-
cpe:2.3:a:mozilla:firefox_mobile:148.0
-
cpe:2.3:a:mozilla:firefox_mobile:148.1
-
cpe:2.3:a:mozilla:firefox_mobile:148.2
-
cpe:2.3:a:mozilla:firefox_mobile:148.3
-
cpe:2.3:a:mozilla:firefox_mobile:149.0
-
cpe:2.3:a:mozilla:firefox_mobile:149.1
-
cpe:2.3:a:mozilla:firefox_mobile:149.2
-
cpe:2.3:a:mozilla:firefox_mobile:149.3
-
cpe:2.3:a:mozilla:firefox_mobile:15.0
-
cpe:2.3:a:mozilla:firefox_mobile:15.1
-
cpe:2.3:a:mozilla:firefox_mobile:150.0
-
cpe:2.3:a:mozilla:firefox_mobile:150.1
-
cpe:2.3:a:mozilla:firefox_mobile:150.2
-
cpe:2.3:a:mozilla:firefox_mobile:150.3
-
cpe:2.3:a:mozilla:firefox_mobile:151.0
-
cpe:2.3:a:mozilla:firefox_mobile:151.1
-
cpe:2.3:a:mozilla:firefox_mobile:151.2
-
cpe:2.3:a:mozilla:firefox_mobile:151.3
-
cpe:2.3:a:mozilla:firefox_mobile:151.3.2
-
cpe:2.3:a:mozilla:firefox_mobile:152.0
-
cpe:2.3:a:mozilla:firefox_mobile:152.3
-
cpe:2.3:a:mozilla:firefox_mobile:152.4
-
cpe:2.3:a:mozilla:firefox_mobile:16.0
-
cpe:2.3:a:mozilla:firefox_mobile:16.1
-
cpe:2.3:a:mozilla:firefox_mobile:16.2
-
cpe:2.3:a:mozilla:firefox_mobile:17.0
-
cpe:2.3:a:mozilla:firefox_mobile:17.1
-
cpe:2.3:a:mozilla:firefox_mobile:17.2
-
cpe:2.3:a:mozilla:firefox_mobile:17.3
-
cpe:2.3:a:mozilla:firefox_mobile:18.0
-
cpe:2.3:a:mozilla:firefox_mobile:18.1
-
cpe:2.3:a:mozilla:firefox_mobile:18.2
-
cpe:2.3:a:mozilla:firefox_mobile:19.0
-
cpe:2.3:a:mozilla:firefox_mobile:19.1
-
cpe:2.3:a:mozilla:firefox_mobile:20.0
-
cpe:2.3:a:mozilla:firefox_mobile:20.1
-
cpe:2.3:a:mozilla:firefox_mobile:20.2
-
cpe:2.3:a:mozilla:firefox_mobile:21.0
-
cpe:2.3:a:mozilla:firefox_mobile:22.0
-
cpe:2.3:a:mozilla:firefox_mobile:23.0
-
cpe:2.3:a:mozilla:firefox_mobile:24.0
-
cpe:2.3:a:mozilla:firefox_mobile:24.1
-
cpe:2.3:a:mozilla:firefox_mobile:25.0
-
cpe:2.3:a:mozilla:firefox_mobile:25.1
-
cpe:2.3:a:mozilla:firefox_mobile:26.0
-
cpe:2.3:a:mozilla:firefox_mobile:27.0
-
cpe:2.3:a:mozilla:firefox_mobile:28.0