CVE-2026-9078 Firefox iOS RTL Domain Rendering Issue in Link Preview

Firefox for iOS displayed specially crafted right-to-left RTL and internationalized domain names IDNs incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This...

CVE-2026-9078

Mozilla Firefox for iOS versions prior to 151.1 are vulnerable to a flaw where specially crafted right-to-left (RTL) and internationalized domain names (IDNs) are displayed incorrectly in link preview UI surfaces. An attacker can use a crafted RTL hostname to visually reorder the displayed domain...