CVE-2026-14906

The vulnerability CVE-2026-14906 affects Firefox for iOS. Pages with malicious titles could cause saved webpages-as-PDF content to overwrite existing PDF files or bundled content within the Firefox for iOS app sandbox. Affected component is the PDF-saving process; root cause details are not expli...

CVE-2026-53899

CVE-2026-53899 affects Firefox for iOS. The issue arises from partial domain matching when attaching cookies to PDF requests, enabling a malicious site on a suffix domain to receive cookies belonging to the target site. The root cause is tied to how cookies were matched during PDF handling, leadi...

CVE-2026-53900

CVE-2026-53900 concerns Firefox for iOS. The issue: cookies set on the initial PDF request were preserved across cross-origin HTTP redirects in TemporaryDocument, enabling a malicious site to inject cookies into requests to an unrelated target domain. The CVE has a base score of 4.3 (Medium) per ...

CVE-2026-16373

CVE-2026-16373 is an information-disclosure vulnerability affecting Mozilla Firefox for Android (Privacy component). The public records show the issue was fixed in Firefox 153, with advisories indicating information disclosure could be obtained in the affected component. The entry also notes affe...

CVE-2026-16404

CVE-2026-16404 is a spoofing vulnerability in Firefox for Android with a CVSS v3.1 base score of 7.4 (HIGH) . The issue affects the Android flavor of Firefox and was fixed in Firefox 153 . Other connected sources corroborate the same description. No additional technical details (root cause, affec...