Mozilla Foundation Security Advisory 2026-81
Security Vulnerabilities fixed in Firefox for iOS 155.0
- Announced
- August 31, 2026
- Impact
- moderate
- Products
- Firefox for iOS
- Fixed in
-
- Firefox for iOS 155
#CVE-2026-81267: Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS
- Reporter
- Azza Tegar Naufal Ataullah
- Impact
- moderate
Description
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content.