Renwa

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** A user interface misrepresentation allows an attacker to perform spoofing over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Firefox for iOS versions prior to 147.4 **Description** A flaw exists in Firefox for iOS that could allow malicious scripts to cause a mismatch between the address bar display and the actual web content. This could lead to a user being presented with a webpage controlled by an attacker while believing they are on a legitimate, spoofed domain. **Recommendations** Update Firefox for iOS to version 147.4 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** A spoofing issue exists in Microsoft Edge (Chromium-based). Information about this issue has been published. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Focus for iOS versions prior to 143.0 **Description** Opening links via the contextual menu for certain URL schemes would fail to load, but the toolbar would not refresh correctly. This could allow attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. **Recommendations** Update Focus for iOS to version 143.0 or later.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 142 Firefox ESR versions prior to 140.2 Description: A spoofing issue exists in the Address Bar component. Recommendations: Update Firefox to version 142 or later. Update Firefox ESR to version 140.2 or later.

Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 142 Description: Focus for iOS did not correctly handle `Content-Disposition` headers of type Attachment, leading to inline display of content. This behavior could potentially allow for cross-site scripting (XSS) attacks. Recommendations: Update to version 142 or later.

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 142 Description: Firefox for iOS did not correctly handle the `Content-Disposition` header of type `Attachment`, resulting in content being displayed inline instead of being downloaded. This behavior could potentially lead to cross-site scripting (XSS) attacks. Recommendations: Update to Firefox for iOS version 142 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox for iOS versions prior to 136 **Description** A spoofing issue exists where websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page. **Recommendations** For Firefox for iOS versions prior to 136, update to version 136 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox for iOS versions prior to 136 **Description** The issue allows malicious websites to utilize a server-side redirect to an internal error page, resulting in a spoofed website URL. **Recommendations** For Firefox for iOS versions prior to 136, update to version 136 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge for iOS and Android (affected versions not specified) **Description** The issue is related to a spoofing vulnerability in Microsoft Edge, where errors in presenting information to the user interface can be exploited. This can allow a remote attacker to conduct spoofing attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Firefox for iOS versions prior to 134 **Description** Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. **Recommendations** For versions prior to 134, update to version 134 or later to resolve the issue. As a temporary workaround, consider avoiding the use of long-press to open Javascript links in new tabs until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to errors in presenting information to the user interface, which can allow a remote attacker to conduct spoofing attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.