CVE-2026-86853

MEDIUMCVSS 4.3

Description

A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.

Timeline

Published:September 8th, 2026 4:18 PM

Last modified:September 8th, 2026 7:07 PM

CVSS Scoring

CVSS v3: 4.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-451

References & Reports

Advisories, patches, and third-party reports

https://bugzilla.mozilla.org/show_bug.cgi?id=1847631
https://www.mozilla.org/security/advisories/mfsa2026-89/

Source: NIST NVD · Data may lag official sources by up to one minute