A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1847631 | Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2026-89/ | Vendor Advisory |
Configurations
History
05 Oct 2026, 17:09
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mozilla
Mozilla firefox Mobile |
|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1847631 - Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2026-89/ - Vendor Advisory | |
| CPE | cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:iphone_os:*:* |
Information
Published : 2026-09-08 16:18
Updated : 2026-10-05 17:09
NVD link : CVE-2026-86853
Mitre link : CVE-2026-86853
CVE.ORG link : CVE-2026-86853
JSON object : View
Products Affected
mozilla
- firefox_mobile
CWE
CWE-451
User Interface (UI) Misrepresentation of Critical Information