9.1
Critical
CVE-2024-10004 Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in…
Description
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS < 131.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox for iOS 131.2 | earliest → < 131.2 | 131.2 |
| Firefox 131.2 | earliest → < 131.2 | 131.2 |
Other CVEs of Firefox for iOS
The 60 CVEs of Firefox for iOS →
CVE-2026-116631
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call…
5.4
Medium
CVE-2026-116632
A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to…
5.4
Medium
CVE-2026-103417
Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the…
5.5
Medium
CVE-2026-103418
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing…
8.8
High