EUVD-2026-72875
GHSA-4c3m-8r8c-3rf3
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Webpage-delivered, no auth needed, user must visit; impact is transient browser unavailability only, with no confidentiality or integrity consequence.
Primary rating from Vendor (mozilla).
CVSS VectorVendor: mozilla
Lifecycle Timeline
5DescriptionCVE.org
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
AnalysisAI
Repeated external URL scheme invocations from a malicious webpage can flood Firefox for iOS with system confirmation prompts or trigger cascading external application launches, rendering the browser temporarily unusable. All Firefox for iOS versions prior to 155.1 on Apple iOS devices are affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The sole prerequisite is that a Firefox for iOS user on any version prior to 155.1 visits the malicious webpage - no authentication, special device configuration, or non-default browser setting is required (UI:R per CVSS). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) accurately reflects the constrained impact: a transient, self-resolving denial-of-service that ends the moment the user closes the tab, with no confidentiality or integrity consequences. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: Firefox for iOS 155.1. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Firefox For Ios
View allFirefox for iOS Reader mode exposed an unauthenticated local HTTP server on the device, enabling a co-installed maliciou
Cookie leakage in Firefox for iOS prior to 152.0 allows an attacker-controlled suffix domain to intercept cookies intend
Address bar spoofing in Firefox for iOS lets a malicious webpage stall a popup's cross-origin navigation after the brows
Cross-site scripting in Firefox for iOS Reader View allows unauthenticated remote attackers to inject arbitrary markup v
Reader View in Firefox for iOS executes arbitrary JavaScript due to an incorrect template substitution order, enabling c
Firefox for iOS misrepresents attacker-controlled domains as trusted origins through improper rendering of right-to-left
PDF save functionality in Firefox for iOS allows maliciously crafted page titles to manipulate the output file path, ena
Cookie injection in Firefox for iOS (all versions prior to 152.0) arises from the browser's TemporaryDocument PDF handli
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today