Mozilla: >> Firefox Mobile >> 152.3 Security Vulnerabilities
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
CVSS Score
5.4
EPSS Score
0.002
Published
2026-08-31
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.
CVSS Score
5.3
EPSS Score
0.003
Published
2026-07-13