CVE-2026-103418

Published: Ott 13, 2026 Last Modified: Ott 13, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1.

https://bugzilla.mozilla.org/show_bug.cgi?id=2062109
https://bugzilla.mozilla.org/show_bug.cgi?id=2062109
https://www.mozilla.org/security/advisories/mfsa2026-105/
https://www.mozilla.org/security/advisories/mfsa2026-105/