← Database

CVE-2026-53900

MEDIUM CVSS: 4.3 Published: 2026-06-16 Modified: 2026-06-17

Description

Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0.

Affected Platforms

Mozilla Firefox Mobile

Weakness Type

CWE-345, CWE-384

References