PT-2026-56041 · Mozilla · Firefox For Ios

Azza Tegar Naufal Ataullah · Published 2026-07-06 · Updated 2026-07-07 · CVE-2026-13356

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 152.3

Description A malicious webpage can interrupt a pending navigation by enqueuing a synchronous JavaScript dialog. This action causes the browser user interface to display the destination origin in the address bar while the browser continues to render content controlled by the attacker.

Recommendations Update Firefox for iOS to version 152.3.

Related Identifiers

CVE-2026-13356

Affected Products

Firefox For Ios

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-13356 · Security Note
• https://mozilla.org/security/advisories/mfsa2026-65 · Vendor Advisory
• https://twitter.com/MalwareObserver/status/2074313236178952465 · Twitter Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=2047768 · Note