CVE-2026-81267

The Firefox for iOS browser is affected by a vulnerability where a malicious webpage can stall a popup's cross-origin navigation after a commit. This allows the address bar to display the intended destination origin while the browser continues to render content controlled by the attacker, potenti...

CVE-2026-81267 Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0...

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked asFire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System TACACS servers, and Linux management hosts used to route, authenticate, and manage high-value...

OnionBrowser v3.4.1

Onion Browser Official Site | Support | Release History | Donate © 2012-2024, Tigas Ventures, LLC Mike Tigas This is the Onion Browser3.X branch. The older versions of Onion Browser can be found here and here. Onion Browser is a free web browser for iPhone and iPad that encrypts and tunnels web...

Security Vulnerabilities fixed in Firefox for iOS 155.0 — Mozilla

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content...

CVE-2026-81267: User Interface (UI) Misrepresentation of Critical Information

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0...

PT-2026-83973

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0...

Linux Distros Unpatched Vulnerability : CVE-2026-65332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,...

mistune-patch-backport

Patch CVE-2021-1748 per iOS = 14.3 La causa principale di CVE-2021-1748 è che l'app si fida di URI di dati arbitrari e li carica in una WebView locale. Questo tweak porta indietro la patch per iOS = 14.3 intercettando l'URI data:. Si noti che esiste ancora una potente variante del bug. Questa pat...

CVE-2026-70331

Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-51376

An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an unauthenticated MESSAGE packet into the mesh gossip cache...

CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2026-70331

CVE-2026-70331 affects Microsoft Edge for iOS and involves an improper neutralization of input used for LLM prompting , allowing an unauthorized attacker to perform spoofing over a network . The vulnerability requires user interaction and no prior privileges , with low attack complexity over the ...

CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability

...

EUVD-2026-67846

Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Edge for iOS Spoofing Vulnerability

Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-51376

An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an unauthenticated MESSAGE packet into the mesh gossip cache...

CVE-2026-51376

An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an unauthenticated MESSAGE packet into the mesh gossip cache...

PT-2026-83175

An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an unauthenticated MESSAGE packet into the mesh gossip cache...

CVE-2026-70331: Undefined Security Weakness

Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...