CVE-2026-14906

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=2045842	Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-66/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:iphone_os:*:*

History

24 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Páginas con títulos maliciosos podrían potencialmente permitir que el contenido PDF guardado sobrescriba archivos PDF o contenido empaquetado dentro del sandbox de la aplicación Firefox para iOS. Esta vulnerabilidad fue corregida en Firefox para iOS 152.4.

Information

Published : 2026-07-13 19:16

Updated : 2026-10-24 22:10

NVD link : CVE-2026-14906

Mitre link : CVE-2026-14906

CVE.ORG link : CVE-2026-14906

JSON object : View

Products Affected

mozilla

firefox_mobile

CWE

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2026-14906", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-14906", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-13T19:31:03.875622Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@mozilla.org", "affectedData": [{"vendor": "Mozilla", "product": "Firefox for iOS", "versions": [{"status": "unaffected", "version": "152.4", "versionType": "rpm", "lessThanOrEqual": "*"}]}]}], "published": "2026-07-13T19:16:46.200", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2045842", "tags": ["Permissions Required"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2026-66/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4."}, {"lang": "es", "value": "P\u00e1ginas con t\u00edtulos maliciosos podr\u00edan potencialmente permitir que el contenido PDF guardado sobrescriba archivos PDF o contenido empaquetado dentro del sandbox de la aplicaci\u00f3n Firefox para iOS. Esta vulnerabilidad fue corregida en Firefox para iOS 152.4."}], "lastModified": "2026-10-24T22:10:00.210", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "CA5F07A1-44D8-41FE-BCFE-70954F254C51", "versionEndExcluding": "152.4"}], "operator": "OR"}]}], "sourceIdentifier": "security@mozilla.org"}