Known vulnerabilities in Firefox for iOS 104

Vendor: Mozilla
Version: 104
Software CPE: cpe:2.3:a:mozilla:firefox_for_ios:*:*:*:*:*:*:*:*
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Firefox for iOS version 104 Firefox for iOS 104 is affected by 28 vulnerabilities: 1 critical, 2 high, 17 medium, 8 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139187 - Improper input validation
CVE-2026-14906
CWE-20 Low
No
No
152.4 22.07.2026 SB2026072299
#VU139186 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-13356
CWE-451 Low
No
No
152.3 22.07.2026 SB2026072298
#VU139182 - Improper input validation
CVE-2026-53899
CWE-20 Medium
No
No
152.0 22.07.2026 SB2026072296
#VU139183 - Interpretation Conflict
CVE-2026-53900
CWE-436 Medium
No
No
152.0 22.07.2026 SB2026072296
#VU132257 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-9078
CWE-451 Low
No
No
151.1 25.05.2026 SB2026052526
#VU123245 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-2634
CWE-451 Medium
No
No
147.4 25.02.2026 SB2026022528
#VU120003 - Improper input validation
CVE-2025-14744
CWE-20 Medium
No
No
144.0 16.12.2025 SB2025121646
#VU100969 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-53976
CWE-451 Medium
No
No
133.0 26.11.2024 SB2024112672
#VU100968 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-53975
CWE-451 Medium
No
No
133.0 26.11.2024 SB2024112672
#VU92105 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38312
CWE-200 Low
No
No
127.0 14.06.2024 SB2024061403
#VU92104 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-38313
CWE-451 Medium
No
No
127.0 14.06.2024 SB2024061403
#VU86746 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-26281
CWE-94 Medium
No
No
123.0 23.02.2024 SB2024022307
#VU86745 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-26282
CWE-79 Medium
No
No
123.0 23.02.2024 SB2024022307
#VU86744 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-26283
CWE-451 Medium
No
No
123.0 23.02.2024 SB2024022307
#VU86644 - Memory corruption
CVE-2024-1553
CWE-119 High
No
No
123.0 20.02.2024 SB2024022043
SB2024022051
SB2024022103
and 39 more
#VU86643 - Resource Management Errors
CVE-2024-1552
CWE-399 Low
No
No
123.0 20.02.2024 SB2024022043
SB2024022051
SB2024022103
and 37 more
#VU86642 - Improper input validation
CVE-2024-1551
CWE-20 Medium
No
No
123.0 20.02.2024 SB2024022043
SB2024022051
SB2024022103
and 39 more
#VU86641 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-1550
CWE-451 Medium
No
No
123.0 20.02.2024 SB2024022043
SB2024022051
SB2024022103
and 39 more
#VU86640 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-1549
CWE-451 Medium
No
No
123.0 20.02.2024 SB2024022043
SB2024022051
SB2024022103
and 39 more
#VU86639 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-1548
CWE-451 Medium
No
No
123.0 20.02.2024 SB2024022043
SB2024022051
SB2024022103
and 39 more


Showing elements 1 - 20 out of 28