Muneaki Nishimura

Universal XSS via the HTML language attribute in Translation Services

Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS

Cross-origin cookies could be leaked when opening a PDF link

Cookie injection was possible when opening a PDF link

Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order

Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injection

Sensitive user data could be leaked to other applications through Reader mode

Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs

Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127.