CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

CVE-2026-2032

Mozilla Firefox for iOS is vulnerable to a security flaw where malicious scripts that interrupt new tab page loading cause a desynchronization between the address bar and the page content. This allows an attacker to spoof arbitrary HTML under a trusted domain. The vulnerability affects versions p...