FF
Product
Firefox for iOS
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 10Low 0
Watch
Add Firefox for iOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10004 | 9.1 | Oct 15 | Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS… Affected: before 131.2 |
| CVE-2024-26283 | 7.8 | Feb 22 | An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme Affected: before 123 |
| CVE-2024-31392 | 7.5 | Apr 3 | If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status This vulnerability affects Firefox for iOS… Affected: before 124 |
| CVE-2024-26282 | 7.1 | Feb 22 | Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page Affected: before 123 |
| CVE-2024-38312 | 6.5 | Jun 13 | When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This… Affected: before 127 |
| CVE-2024-43111 | 6.1 | Aug 6 | Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129 Affected: before 129 |
| CVE-2024-43113 | 6.1 | Aug 6 | The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS < 129 Affected: before 129 |
| CVE-2024-43112 | 6.1 | Aug 6 | Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129 Affected: before 129 |
| CVE-2024-0953 | 6.1 | Feb 5 | When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code Affected: before 129 |
| CVE-2024-53976 | 5.4 | Nov 26 | Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, making it unclear what the URL was for the loaded webpage Affected: before 133 |
| CVE-2024-53975 | 5.4 | Nov 26 | Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure Affected: before 133 |
| CVE-2024-26281 | 4.7 | Feb 22 | Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar Affected: before 123 |
| CVE-2024-38313 | 4.3 | Jun 13 | In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects… Affected: before 127 |
| CVE-2024-31393 | 4.3 | Apr 3 | Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS < 124 Affected: before 124 |
Showing 14