CVE-2026-11799

The mobile web browsers Mozilla Focus for iOS and Mozilla Klar for iOS are vulnerable to a Universal Cross-Site Scripting (UXSS) flaw. The root cause is improper input validation during the Webkit navigation process, which allows attackers to execute malicious scripts across different origins by ...

CVE-2026-2919

Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability was fixed in Focus for...

PT-2026-21830

Name of the Vulnerable Software and Affected Versions Focus for iOS versions prior to 148.2 Description A security issue exists in Focus for iOS that could allow malicious scripts to display attacker-controlled web content under spoofed domains. This is achieved by stalling a navigation to an...

EUVD-2025-25222

Malicious code in bioql PyPI...

PT-2025-37927

Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 143.0 Description: Opening links via the contextual menu for certain URL schemes would fail to load, but the toolbar would not refresh correctly. This could allow attackers to spoof websites if users were coerc...