agentprime: mozilla-firefox-for-ios

agentprime: mozilla-firefox-for-iosEvery new CVE for mozilla-firefox-for-ios.https://agentprime.io/CVE-2026-116631: External protocol handler (tel:) address bar spoofhttps://agentprime.io/advisories/CVE-2026-116631/https://agentprime.io/advisories/CVE-2026-116631/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 18:32:36 GMTCVECVE-2026-116632: Facetime protocol handler enabled spoofinghttps://agentprime.io/advisories/CVE-2026-116632/https://agentprime.io/advisories/CVE-2026-116632/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 18:32:35 GMTCVECVE-2026-103417: Saved credentials can be autofilled after cross-origin navigationhttps://agentprime.io/advisories/CVE-2026-103417/https://agentprime.io/advisories/CVE-2026-103417/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 07:19:10 GMTCVECVE-2026-103418: Universal XSS via the HTML language attribute in Translation Serviceshttps://agentprime.io/advisories/CVE-2026-103418/https://agentprime.io/advisories/CVE-2026-103418/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 07:19:09 GMTCVECVE-2026-86853: Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOShttps://agentprime.io/advisories/CVE-2026-86853/https://agentprime.io/advisories/CVE-2026-86853/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 15:14:51 GMTCVECVE-2026-81267: Stalled popup navigation could allow address bar origin spoofing in Firefox for iOShttps://agentprime.io/advisories/CVE-2026-81267/https://agentprime.io/advisories/CVE-2026-81267/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 19:37:55 GMTCVECVE-2026-14906: Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOShttps://agentprime.io/advisories/CVE-2026-14906/https://agentprime.io/advisories/CVE-2026-14906/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 18:27:03 GMTCVECVE-2026-13356: Interrupted navigation could allow address bar origin spoofing in Firefox for iOShttps://agentprime.io/advisories/CVE-2026-13356/https://agentprime.io/advisories/CVE-2026-13356/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 23:07:42 GMTCVECVE-2026-53900: Cookie injection was possible when opening a PDF linkhttps://agentprime.io/advisories/CVE-2026-53900/https://agentprime.io/advisories/CVE-2026-53900/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 11:53:05 GMTCVECVE-2026-53899: Cross-origin cookies could be leaked when opening a PDF linkhttps://agentprime.io/advisories/CVE-2026-53899/https://agentprime.io/advisories/CVE-2026-53899/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 11:53:04 GMTCVECVE-2026-9309: Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injectionhttps://agentprime.io/advisories/CVE-2026-9309/https://agentprime.io/advisories/CVE-2026-9309/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 11:24:10 GMTCVECVE-2026-9308: Arbitrary JavaScript execution in Reader View due to wrong HTML replacement orderhttps://agentprime.io/advisories/CVE-2026-9308/https://agentprime.io/advisories/CVE-2026-9308/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 11:24:09 GMTCVECVE-2026-9078: Firefox iOS RTL Domain Rendering Issue in Link Previewhttps://agentprime.io/advisories/CVE-2026-9078/https://agentprime.io/advisories/CVE-2026-9078/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 May 2026 14:05:47 GMTCVECVE-2026-8706: Sensitive user data could be leaked to other applications through Reader modehttps://agentprime.io/advisories/CVE-2026-8706/https://agentprime.io/advisories/CVE-2026-8706/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 14:27:38 GMTCVECVE-2026-2634: Spoofed web content presented under trusted domains using scripted navigation on Firefox iOShttps://agentprime.io/advisories/CVE-2026-2634/https://agentprime.io/advisories/CVE-2026-2634/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Feb 2026 13:33:24 GMTCVEcriticalCVE-2026-2032: Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOShttps://agentprime.io/advisories/CVE-2026-2032/https://agentprime.io/advisories/CVE-2026-2032/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Feb 2026 14:13:23 GMTCVECVE-2025-14744: Filename spoofing via Unicode Right-to-Left Override in Firefox for iOShttps://agentprime.io/advisories/CVE-2025-14744/https://agentprime.io/advisories/CVE-2025-14744/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 14:21:12 GMTCVECVE-2025-10859: Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabshttps://agentprime.io/advisories/CVE-2025-10859/https://agentprime.io/advisories/CVE-2025-10859/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Sep 2025 12:49:07 GMTCVECVE-2025-55029: Malicious scripts could spam popups for denial of service attackshttps://agentprime.io/advisories/CVE-2025-55029/https://agentprime.io/advisories/CVE-2025-55029/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 20:52:50 GMTCVECVE-2025-55031: Passkey phishing within Bluetooth rangehttps://agentprime.io/advisories/CVE-2025-55031/https://agentprime.io/advisories/CVE-2025-55031/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 20:52:49 GMTCVEcriticalCVE-2025-55028: JavaScript alerts could impede UI interaction or allow denial of service attackshttps://agentprime.io/advisories/CVE-2025-55028/https://agentprime.io/advisories/CVE-2025-55028/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 20:52:49 GMTCVECVE-2025-55030: Content-Disposition headers incorrectly ignored for some MIME typeshttps://agentprime.io/advisories/CVE-2025-55030/https://agentprime.io/advisories/CVE-2025-55030/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 20:52:48 GMTCVECVE-2025-54145: Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websiteshttps://agentprime.io/advisories/CVE-2025-54145/https://agentprime.io/advisories/CVE-2025-54145/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 20:52:48 GMTCVEcriticalCVE-2025-54144: Internal Firefox open-text URL scheme allowed loading of arbitrary URLshttps://agentprime.io/advisories/CVE-2025-54144/https://agentprime.io/advisories/CVE-2025-54144/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 20:52:47 GMTCVECVE-2025-54143: Sandboxed iframes could allow local downloads despite sandbox restrictionshttps://agentprime.io/advisories/CVE-2025-54143/https://agentprime.io/advisories/CVE-2025-54143/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 20:52:47 GMTCVEcriticalCVE-2025-5020: Links using non-HTTP schemes opened from other apps such as Safari could have allowed spoofing of website addresseshttps://agentprime.io/advisories/CVE-2025-5020/https://agentprime.io/advisories/CVE-2025-5020/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 May 2025 17:18:08 GMTCVECVE-2025-27425: QR code user confirmation bypass with invalid protocolhttps://agentprime.io/advisories/CVE-2025-27425/https://agentprime.io/advisories/CVE-2025-27425/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 13:31:28 GMTCVECVE-2025-27424: Firefox Mobile iOS Address Bar Spoof Using Server-Side Redirect to non-http Schemehttps://agentprime.io/advisories/CVE-2025-27424/https://agentprime.io/advisories/CVE-2025-27424/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 13:31:28 GMTCVECVE-2025-27426: Firefox Mobile iOS Full Address Bar Spoof Using Server-Side Redirect to internal error pagehttps://agentprime.io/advisories/CVE-2025-27426/https://agentprime.io/advisories/CVE-2025-27426/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 13:31:27 GMTCVECVE-2025-23109: Address bar spoofing on iOS using long hostnameshttps://agentprime.io/advisories/CVE-2025-23109/https://agentprime.io/advisories/CVE-2025-23109/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jan 2025 03:36:55 GMTCVECVE-2025-23108: Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URIhttps://agentprime.io/advisories/CVE-2025-23108/https://agentprime.io/advisories/CVE-2025-23108/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jan 2025 03:36:53 GMTCVECVE-2024-53976: Clickjacking in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-53976/https://agentprime.io/advisories/CVE-2024-53976/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Nov 2024 13:34:07 GMTCVECVE-2024-53975: Mozilla Firefox for iOS: Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock…https://agentprime.io/advisories/CVE-2024-53975/https://agentprime.io/advisories/CVE-2024-53975/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Nov 2024 13:34:07 GMTCVECVE-2024-10004: Clickjacking in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-10004/https://agentprime.io/advisories/CVE-2024-10004/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Oct 2024 21:29:01 GMTCVEcriticalCVE-2024-43111: Cross-site scripting in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-43111/https://agentprime.io/advisories/CVE-2024-43111/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:55:14 GMTCVEcriticalCVE-2024-43113: Cross-site scripting in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-43113/https://agentprime.io/advisories/CVE-2024-43113/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:55:13 GMTCVECVE-2024-43112: Cross-site scripting in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-43112/https://agentprime.io/advisories/CVE-2024-43112/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:55:13 GMTCVECVE-2024-38312: Insecure storage of sensitive information in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-38312/https://agentprime.io/advisories/CVE-2024-38312/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Jun 2024 20:01:13 GMTCVECVE-2024-38313: Mozilla Firefox for iOS: In certain scenarios a malicious website could attempt to display a fake location URL bar…https://agentprime.io/advisories/CVE-2024-38313/https://agentprime.io/advisories/CVE-2024-38313/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Jun 2024 20:01:13 GMTCVECVE-2024-31392: Mozilla Firefox for iOS: If an insecure element was added to a page after a delay…https://agentprime.io/advisories/CVE-2024-31392/https://agentprime.io/advisories/CVE-2024-31392/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Apr 2024 15:19:14 GMTCVECVE-2024-31393: Mozilla Firefox for iOS: Dragging Javascript URLs to the address bar could cause them to be loaded…https://agentprime.io/advisories/CVE-2024-31393/https://agentprime.io/advisories/CVE-2024-31393/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Apr 2024 15:19:14 GMTCVECVE-2024-26281: Cross-site scripting in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-26281/https://agentprime.io/advisories/CVE-2024-26281/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Feb 2024 14:56:45 GMTCVECVE-2024-26282: Cross-site scripting in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-26282/https://agentprime.io/advisories/CVE-2024-26282/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Feb 2024 14:56:44 GMTCVECVE-2024-26283: Mozilla Firefox for iOS: An attacker could have executed unauthorized scripts on top origin sites using a…https://agentprime.io/advisories/CVE-2024-26283/https://agentprime.io/advisories/CVE-2024-26283/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Feb 2024 14:56:43 GMTCVECVE-2024-0953: Open redirect in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2024-0953/https://agentprime.io/advisories/CVE-2024-0953/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 16:48:33 GMTCVECVE-2023-49061: Mozilla Firefox for iOS: An attacker could have performed HTML template injection via Reader Mode and exfiltrated…https://agentprime.io/advisories/CVE-2023-49061/https://agentprime.io/advisories/CVE-2023-49061/Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Nov 2023 14:28:55 GMTCVECVE-2023-49060: Mozilla Firefox for iOS: An attacker could have accessed internal pages or data by ex-filtrating a security key…https://agentprime.io/advisories/CVE-2023-49060/https://agentprime.io/advisories/CVE-2023-49060/Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Nov 2023 14:28:55 GMTCVECVE-2023-5758: Cross-site scripting in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2023-5758/https://agentprime.io/advisories/CVE-2023-5758/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Oct 2023 20:11:15 GMTCVECVE-2023-37456: NULL pointer dereference in Mozilla Firefox for iOShttps://agentprime.io/advisories/CVE-2023-37456/https://agentprime.io/advisories/CVE-2023-37456/Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jul 2023 13:46:28 GMTCVECVE-2023-37455: Mozilla Firefox for iOS: The permission request prompt from the site in the background tab was overlaid on top of…https://agentprime.io/advisories/CVE-2023-37455/https://agentprime.io/advisories/CVE-2023-37455/Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jul 2023 13:46:07 GMTCVE