CVE-2026-103417

Published: Ott 13, 2026 Last Modified: Ott 13, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.

https://bugzilla.mozilla.org/show_bug.cgi?id=2068171
https://bugzilla.mozilla.org/show_bug.cgi?id=2068171
https://www.mozilla.org/security/advisories/mfsa2026-105/
https://www.mozilla.org/security/advisories/mfsa2026-105/