CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4.

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4.

Scripts maliciosos podrían causar desincronización entre la barra de direcciones y el contenido web antes de que se reciba una respuesta en Firefox iOS, permitiendo que páginas controladas por el atacante se presenten bajo dominios falsificados. Esta vulnerabilidad afecta a Firefox para iOS < 147.4.