Mozilla: >> Firefox Mobile >> 152.4 Security Vulnerabilities
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
CVSS Score
5.4
EPSS Score
0.002
Published
2026-08-31