{"schema_version":1,"title":"Mozilla Firefox for iOS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in Mozilla Firefox for iOS: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86853, was published on 8 September 2026.","url":"https://junglewise.ai/threats/technologies/firefox-for-ios","json_url":"https://junglewise.ai/threats/technologies/firefox-for-ios.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/firefox-for-ios","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":10,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":4,"last_365_days":10},"latest":[{"cve":"CVE-2026-86853","cvss":4.3,"epss":0.003,"slug":"cve-2026-86853-mozilla-firefox-for-ios-denial-of-service-via-url-schemes","title":"Mozilla Firefox for iOS denial of service via URL schemes","severity":"medium","exploited":false,"published_at":"2026-09-08T16:18:37.703+00:00","url":"https://junglewise.ai/threats/cve-2026-86853-mozilla-firefox-for-ios-denial-of-service-via-url-schemes"},{"cve":"CVE-2026-81267","cvss":5.4,"epss":0.0026,"slug":"cve-2026-81267-mozilla-firefox-for-ios-address-bar-spoofing-in-popup-navigation","title":"Mozilla Firefox for iOS address bar spoofing in popup navigation","severity":"medium","exploited":false,"published_at":"2026-08-31T20:17:11.983+00:00","url":"https://junglewise.ai/threats/cve-2026-81267-mozilla-firefox-for-ios-address-bar-spoofing-in-popup-navigation"},{"cve":"CVE-2026-14906","cvss":0,"slug":"cve-2026-14906-mozilla-firefox-for-ios-sandbox-file-overwrite-via-malicious-page","title":"Mozilla Firefox for iOS sandbox file overwrite via malicious page titles","severity":"info","exploited":false,"published_at":"2026-07-13T19:16:46.2+00:00","url":"https://junglewise.ai/threats/cve-2026-14906-mozilla-firefox-for-ios-sandbox-file-overwrite-via-malicious-page"},{"cve":"CVE-2026-13356","cvss":0,"slug":"cve-2026-13356-mozilla-firefox-for-ios-address-bar-origin-spoofing","title":"Mozilla Firefox for iOS address bar origin spoofing","severity":"info","exploited":false,"published_at":"2026-07-07T00:16:34.063+00:00","url":"https://junglewise.ai/threats/cve-2026-13356-mozilla-firefox-for-ios-address-bar-origin-spoofing"},{"cve":"CVE-2026-53900","cvss":7.5,"slug":"cve-2026-53900-mozilla-firefox-for-ios-cookie-injection-via-pdf-redirect","title":"Mozilla Firefox for iOS cookie injection via PDF redirect","severity":"info","exploited":false,"published_at":"2026-06-16T13:16:37.517+00:00","url":"https://junglewise.ai/threats/cve-2026-53900-mozilla-firefox-for-ios-cookie-injection-via-pdf-redirect"},{"cve":"CVE-2026-53899","cvss":7.5,"slug":"cve-2026-53899-mozilla-firefox-for-ios-cookie-leakage-in-pdf-requests","title":"Mozilla Firefox for iOS cookie leakage in PDF requests","severity":"info","exploited":false,"published_at":"2026-06-16T13:16:37.42+00:00","url":"https://junglewise.ai/threats/cve-2026-53899-mozilla-firefox-for-ios-cookie-leakage-in-pdf-requests"},{"cve":"CVE-2026-9309","cvss":8.8,"slug":"cve-2026-9309-mozilla-firefox-for-ios-html-injection-in-reader-view-json-ld","title":"Mozilla Firefox for iOS HTML injection in Reader View JSON-LD metadata","severity":"info","exploited":false,"published_at":"2026-06-01T13:16:33.623+00:00","url":"https://junglewise.ai/threats/cve-2026-9309-mozilla-firefox-for-ios-html-injection-in-reader-view-json-ld"},{"cve":"CVE-2026-9308","slug":"cve-2026-9308-mozilla-firefox-for-ios-javascript-execution-in-reader-view","title":"Mozilla Firefox for iOS JavaScript execution in Reader View","severity":"info","exploited":false,"published_at":"2026-06-01T13:16:33.523+00:00","url":"https://junglewise.ai/threats/cve-2026-9308-mozilla-firefox-for-ios-javascript-execution-in-reader-view"},{"cve":"CVE-2026-9078","epss":0.0002,"slug":"cve-2026-9078-mozilla-firefox-for-ios-address-spoofing-in-link-preview","title":"Mozilla Firefox for iOS address spoofing in link preview","severity":"info","exploited":false,"published_at":"2026-05-25T15:16:22.97+00:00","url":"https://junglewise.ai/threats/cve-2026-9078-mozilla-firefox-for-ios-address-spoofing-in-link-preview"},{"cve":"CVE-2026-8706","slug":"cve-2026-8706-mozilla-firefox-for-ios-data-leak-in-reader-mode-local-web-server","title":"Mozilla Firefox for iOS data leak in Reader mode local web server","severity":"info","exploited":false,"published_at":"2026-05-19T16:16:22.58+00:00","url":"https://junglewise.ai/threats/cve-2026-8706-mozilla-firefox-for-ios-data-leak-in-reader-mode-local-web-server"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Mozilla Firefox","slug":"firefox","vulnerabilities":393,"url":"https://junglewise.ai/threats/technologies/firefox"},{"name":"Mozilla Firefox ESR","slug":"firefox-esr","vulnerabilities":295,"url":"https://junglewise.ai/threats/technologies/firefox-esr"},{"name":"Mozilla Thunderbird","slug":"thunderbird","vulnerabilities":267,"url":"https://junglewise.ai/threats/technologies/thunderbird"},{"name":"Mozilla Thunderbird-Esr","slug":"thunderbird-esr","vulnerabilities":66,"url":"https://junglewise.ai/threats/technologies/thunderbird-esr"},{"name":"Mozilla Firefox for Android","slug":"firefox-for-android","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/firefox-for-android"},{"name":"Mozilla Firefox Mobile","slug":"firefox-mobile","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/firefox-mobile"},{"name":"Mozilla Firefox Focus","slug":"firefox-focus-for-android","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/firefox-focus-for-android"}],"technology":{"hub":true,"name":"Mozilla Firefox for iOS","slug":"firefox-for-ios","vendor":{"name":"Mozilla","slug":"mozilla","url":"https://junglewise.ai/threats/vendors/mozilla"},"aliases":[],"category":"web-browser","homepage":"https://www.mozilla.org/firefox/mobile/","repo_url":"https://github.com/mozilla-mobile/firefox-ios","description":"A mobile web browser developed by Mozilla for the iOS operating system.","url":"https://junglewise.ai/threats/technologies/firefox-for-ios"},"most_severe":[{"cve":"CVE-2026-81267","cvss":5.4,"epss":0.0026,"slug":"cve-2026-81267-mozilla-firefox-for-ios-address-bar-spoofing-in-popup-navigation","title":"Mozilla Firefox for iOS address bar spoofing in popup navigation","severity":"medium","exploited":false,"published_at":"2026-08-31T20:17:11.983+00:00","url":"https://junglewise.ai/threats/cve-2026-81267-mozilla-firefox-for-ios-address-bar-spoofing-in-popup-navigation"},{"cve":"CVE-2026-86853","cvss":4.3,"epss":0.003,"slug":"cve-2026-86853-mozilla-firefox-for-ios-denial-of-service-via-url-schemes","title":"Mozilla Firefox for iOS denial of service via URL schemes","severity":"medium","exploited":false,"published_at":"2026-09-08T16:18:37.703+00:00","url":"https://junglewise.ai/threats/cve-2026-86853-mozilla-firefox-for-ios-denial-of-service-via-url-schemes"},{"cve":"CVE-2026-9309","cvss":8.8,"slug":"cve-2026-9309-mozilla-firefox-for-ios-html-injection-in-reader-view-json-ld","title":"Mozilla Firefox for iOS HTML injection in Reader View JSON-LD metadata","severity":"info","exploited":false,"published_at":"2026-06-01T13:16:33.623+00:00","url":"https://junglewise.ai/threats/cve-2026-9309-mozilla-firefox-for-ios-html-injection-in-reader-view-json-ld"},{"cve":"CVE-2026-53900","cvss":7.5,"slug":"cve-2026-53900-mozilla-firefox-for-ios-cookie-injection-via-pdf-redirect","title":"Mozilla Firefox for iOS cookie injection via PDF redirect","severity":"info","exploited":false,"published_at":"2026-06-16T13:16:37.517+00:00","url":"https://junglewise.ai/threats/cve-2026-53900-mozilla-firefox-for-ios-cookie-injection-via-pdf-redirect"},{"cve":"CVE-2026-53899","cvss":7.5,"slug":"cve-2026-53899-mozilla-firefox-for-ios-cookie-leakage-in-pdf-requests","title":"Mozilla Firefox for iOS cookie leakage in PDF requests","severity":"info","exploited":false,"published_at":"2026-06-16T13:16:37.42+00:00","url":"https://junglewise.ai/threats/cve-2026-53899-mozilla-firefox-for-ios-cookie-leakage-in-pdf-requests"},{"cve":"CVE-2026-14906","cvss":0,"slug":"cve-2026-14906-mozilla-firefox-for-ios-sandbox-file-overwrite-via-malicious-page","title":"Mozilla Firefox for iOS sandbox file overwrite via malicious page titles","severity":"info","exploited":false,"published_at":"2026-07-13T19:16:46.2+00:00","url":"https://junglewise.ai/threats/cve-2026-14906-mozilla-firefox-for-ios-sandbox-file-overwrite-via-malicious-page"},{"cve":"CVE-2026-13356","cvss":0,"slug":"cve-2026-13356-mozilla-firefox-for-ios-address-bar-origin-spoofing","title":"Mozilla Firefox for iOS address bar origin spoofing","severity":"info","exploited":false,"published_at":"2026-07-07T00:16:34.063+00:00","url":"https://junglewise.ai/threats/cve-2026-13356-mozilla-firefox-for-ios-address-bar-origin-spoofing"},{"cve":"CVE-2026-9078","epss":0.0002,"slug":"cve-2026-9078-mozilla-firefox-for-ios-address-spoofing-in-link-preview","title":"Mozilla Firefox for iOS address spoofing in link preview","severity":"info","exploited":false,"published_at":"2026-05-25T15:16:22.97+00:00","url":"https://junglewise.ai/threats/cve-2026-9078-mozilla-firefox-for-ios-address-spoofing-in-link-preview"},{"cve":"CVE-2026-9308","slug":"cve-2026-9308-mozilla-firefox-for-ios-javascript-execution-in-reader-view","title":"Mozilla Firefox for iOS JavaScript execution in Reader View","severity":"info","exploited":false,"published_at":"2026-06-01T13:16:33.523+00:00","url":"https://junglewise.ai/threats/cve-2026-9308-mozilla-firefox-for-ios-javascript-execution-in-reader-view"},{"cve":"CVE-2026-8706","slug":"cve-2026-8706-mozilla-firefox-for-ios-data-leak-in-reader-mode-local-web-server","title":"Mozilla Firefox for iOS data leak in Reader mode local web server","severity":"info","exploited":false,"published_at":"2026-05-19T16:16:22.58+00:00","url":"https://junglewise.ai/threats/cve-2026-8706-mozilla-firefox-for-ios-data-leak-in-reader-mode-local-web-server"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}