8.8Alta
Use-after-free in the Audio/Video component
Mozilla Firefox
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
4.3Media
CVE-2026-86853Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS
Descripción
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
Debilidad (CWE):
CWE-451
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Mozilla | Firefox for iOS | — | |
| mozilla | firefox mobile | < 155.1 |
Referencias y parches
Coincidencias CPE (NVD) (1)
cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:iphone_os:*:*< 155.1