8.8Yüksek
Use-after-free in the Audio/Video component
Mozilla Firefox
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
5.3Orta
CVE-2026-14906Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS
Açıklama
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.
Zayıflık türü (CWE):
CWE-434
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Mozilla | Firefox for iOS | — | |
| mozilla | firefox mobile | < 152.4 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:iphone_os:*:*< 152.4