Lucene search
+L

424 matches found

NVD
NVD
added 2026/02/24 2:16 p.m.9 views

CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

9.8CVSS0.00308EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/24 2:16 p.m.16 views

CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability affects Firefox for iOS 147.4...

9.8CVSS5.7AI score0.00308EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/02/24 2:16 p.m.11 views

CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

9.8CVSS5.8AI score0.00308EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/24 2:16 p.m.8 views

UBUNTU-CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

9.8CVSS5.8AI score0.00308EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/24 1:33 p.m.9 views

CVE-2026-2634 Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

5.7AI score0.00308EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/24 1:33 p.m.8 views

EUVD-2026-8446

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability affects Firefox for iOS 147.4...

5.3AI score0.00308EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/02/24 1:33 p.m.10 views

CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

9.8CVSS5.7AI score0.00308EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/02/24 1:33 p.m.11 views

CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

9.8CVSS5.2AI score0.00308EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.12 views

PT-2026-21689

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 147.4 Description A flaw exists in Firefox for iOS that could allow malicious scripts to cause a mismatch between the address bar display and the actual web content. This could lead to a user being presented...

9.8CVSS5.3AI score0.00308EPSS
SaveExploits0References7
Mozilla
Mozilla
added 2026/02/20 12:0 a.m.16 views

Security Vulnerabilities fixed in Firefox for iOS 147.4 — Mozilla

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains...

9.8CVSS5.3AI score0.00308EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/02/16 3:18 p.m.13 views

CVE-2026-2032

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1...

4.3CVSS0.0015EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/16 3:18 p.m.6 views

CVE-2026-2032

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability affects Firefox for iOS 147.2.1...

4.3CVSS5.9AI score0.0015EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/16 3:18 p.m.6 views

UBUNTU-CVE-2026-2032

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1...

4.3CVSS5.9AI score0.0015EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2026/02/16 2:13 p.m.24 views

CVE-2026-2032

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1...

4.3CVSS5.9AI score0.0015EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/16 2:13 p.m.5 views

CVE-2026-2032 Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1...

5.9AI score0.0015EPSS
SaveExploits0References2
Mozilla
Mozilla
added 2026/02/09 12:0 a.m.15 views

Security Vulnerabilities fixed in Firefox for iOS 147.2.1 — Mozilla

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain...

4.3CVSS5.7AI score0.0015EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/27 3:23 p.m.5 views

CVE-2025-41082

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS5.9AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/26 10:16 a.m.10 views

CVE-2025-41082

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/26 9:24 a.m.5 views

CVE-2025-41082 HTTP Request/Response Smuggling in Altitude Communication Server

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS5.9AI score0.00386EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/26 9:24 a.m.3 views

CVE-2025-41082

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS5.9AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder