FF
Product
Firefox for iOS
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 14Low 0
Watch
Add Firefox for iOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38312 | 6.5 | Jun 13 | When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This… Affected: before 127 |
| CVE-2023-37456 | 6.5 | Jul 12 | The session restore helper crashed whenever there was no parameter sent to the message handler Affected: before 115 |
| CVE-2024-43111 | 6.1 | Aug 6 | Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129 Affected: before 129 |
| CVE-2024-43113 | 6.1 | Aug 6 | The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects Firefox for iOS < 129 Affected: before 129 |
| CVE-2024-43112 | 6.1 | Aug 6 | Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects Firefox for iOS < 129 Affected: before 129 |
| CVE-2024-0953 | 6.1 | Feb 5 | When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code Affected: before 129 |
| CVE-2023-49061 | 6.1 | Nov 21 | An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information Affected: before 120 |
| CVE-2023-5758 | 6.1 | Oct 24 | When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack Affected: before 119 |
| CVE-2024-53976 | 5.4 | Nov 26 | Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, making it unclear what the URL was for the loaded webpage Affected: before 133 |
| CVE-2024-53975 | 5.4 | Nov 26 | Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure Affected: before 133 |
| CVE-2023-37455 | 5.4 | Jul 12 | The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab Affected: before 115 |
| CVE-2024-26281 | 4.7 | Feb 22 | Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar Affected: before 123 |
| CVE-2024-38313 | 4.3 | Jun 13 | In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects… Affected: before 127 |
| CVE-2024-31393 | 4.3 | Apr 3 | Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS < 124 Affected: before 124 |
Showing 14