CVE-2026-13356

A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3.

CVSS v3 6.3 MEDIUM

6.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=2047768	Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-65/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*

History

25 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Una página web maliciosa podría interrumpir una navegación pendiente al encolar un diálogo JavaScript síncrono, lo que provoca que la interfaz de usuario del navegador muestre el origen de destino en la barra de direcciones mientras continúa renderizando contenido controlado por el atacante. Esta vulnerabilidad se corrigió en Firefox para iOS 152.3.

Information

Published : 2026-07-07 00:16

Updated : 2026-10-25 20:10

NVD link : CVE-2026-13356

Mitre link : CVE-2026-13356

CVE.ORG link : CVE-2026-13356

JSON object : View

Products Affected

mozilla

firefox

CWE

CWE-451

User Interface (UI) Misrepresentation of Critical Information

{"id": "CVE-2026-13356", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13356", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-07T13:26:57.344345Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@mozilla.org", "affectedData": [{"vendor": "Mozilla", "product": "Firefox for iOS", "versions": [{"status": "unaffected", "version": "152.3", "versionType": "rpm", "lessThanOrEqual": "*"}]}]}], "published": "2026-07-07T00:16:34.063", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2047768", "tags": ["Permissions Required"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2026-65/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-451"}]}], "descriptions": [{"lang": "en", "value": "A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3."}, {"lang": "es", "value": "Una p\u00e1gina web maliciosa podr\u00eda interrumpir una navegaci\u00f3n pendiente al encolar un di\u00e1logo JavaScript s\u00edncrono, lo que provoca que la interfaz de usuario del navegador muestre el origen de destino en la barra de direcciones mientras contin\u00faa renderizando contenido controlado por el atacante. Esta vulnerabilidad se corrigi\u00f3 en Firefox para iOS 152.3."}], "lastModified": "2026-10-25T20:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "71042F58-3679-49B6-B19D-B7F7342C4A1B", "versionEndExcluding": "152.3"}], "operator": "OR"}]}], "sourceIdentifier": "security@mozilla.org"}