Advisories · Technology
Mozilla Focus for iOS.
Every CVE that names Mozilla Focus for iOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
UXSS in Focus for iOS / Klar Webkit navigation
- Mozilla Focus for iOS
- Mozilla Klar for iOS
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Attacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirect
- Mozilla Focus for iOS
- CWE-451
- CVSS 6.5 Medium
Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites
- Mozilla Focus for iOS
- CWE-451
- CVSS 6.1 Medium
Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly
- Mozilla Focus for iOS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Focus incorrectly ignores Content-Disposition headers for some MIME types
- Mozilla Focus for iOS
- Open redirect
- CVSS 9.8 CriticalCritical · CVSS 9+
Passkey phishing within Bluetooth range
- Mozilla Firefox for iOS
- Mozilla Focus for iOS
- Open redirect
- CVSS 9.1 CriticalCritical · CVSS 9+
Improper authentication in Mozilla Focus for iOS
- Mozilla Focus for iOS
- Authentication bypass
- CVSS 4.7 Medium
Authentication bypass by spoofing in Mozilla Focus for iOS
- Mozilla Focus for iOS
- Authentication bypass
- CVSS 4.4 Medium
Mozilla Focus for iOS: The file scheme of URLs would be hidden…
- Mozilla Focus for iOS
- CVSS 8.1 High
Time-of-check time-of-use race condition in Mozilla Focus for iOS
- Mozilla Focus for iOS
- Race condition
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Focus for iOS
- Mozilla Focus for iOS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Focus for iOS
- Mozilla Focus for iOS
- Cross-site scripting (XSS)
- CVSS 7.5 High
Race condition in Mozilla Focus for iOS
- Mozilla Focus for iOS
- Race condition