← Database

CVE-2026-2634

CRITICAL CVSS: 9.8 Published: 2026-02-24 Modified: 2026-06-17

Description

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4.

Affected Platforms

Mozilla Firefox

Weakness Type

NVD-CWE-noinfo, CWE-451

References