CVE-2026-2032

Description

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability affects Firefox for iOS < 147.2.1.

PUBLISHED Reserved 2026-02-06 | Published 2026-02-16 | Updated 2026-02-16 | Assigner mozilla

Product status

Credits

Qadhafy Muhammad Tera

References

bugzilla.mozilla.org/show_bug.cgi?id=2012152

www.mozilla.org/security/advisories/mfsa2026-09/

cve.org (CVE-2026-2032)

nvd.nist.gov (CVE-2026-2032)

Download JSON