CVEvulnerability

CVE-2026-86853

4.3 MEDIUM Published 2026-09-08 Modified 2026-10-05 Official page ↗
Status
Analyzed
Published
2026-09-08
Last modified
2026-10-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weaknesses
CWE-451

Description

A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.

Affected configurations

• mozilla firefox mobile (< 155.1)

Related

Weakness · CWE (1)

  • CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness

References