Mozilla Firefox For IOS vulnerabilities

2 CVEs affecting Mozilla Firefox For IOS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-103418, published 2026-10-13.

More from Mozilla.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-103418, published 2026-10-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and…
• CVE-2026-103417, published 2026-10-13. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when…