EN PT-BR
← Voltar ao feed
medium

CERT-FR advisory: multiple vulnerabilities in Mozilla Firefox for iOS before 156.1

1 fonte(s) · 1 atualização(ões) · publicado 26/10/2026 21:00 · coletado há 3 dias

CERT-FR published advisory CERTFR-2026-AVI-1391 on 27 October 2026 covering multiple vulnerabilities in Mozilla Firefox, specifically Firefox for iOS versions prior to 156.1. Exploitation can lead to data integrity compromise and security policy bypass. The flaws are tracked as CVE-2026-116631 and CVE-2026-116632, disclosed in Mozilla security bulletin mfsa2026-117 of 26 October 2026. No exploitation in the wild, CVSS scores or IOCs are mentioned.

Entenda a falha

A vulnerabilidade

Two vulnerabilities, CVE-2026-116631 and CVE-2026-116632, affect Firefox for iOS in versions before 156.1. CERT-FR says an attacker could compromise data integrity and bypass a security policy. The articles do not say which CVE does what, which component is affected, what the attacker needs (network reach, authentication, user interaction) or how severe each flaw is. No CVSS score is given. The fix is Firefox for iOS 156.1, per Mozilla bulletin mfsa2026-117.

Como foi descoberta

Mozilla disclosed both flaws in security bulletin mfsa2026-117 on 26 October 2026, and CERT-FR republished them as advisory CERTFR-2026-AVI-1391 on 27 October 2026. The articles do not say who found the flaws or how, and they mention no earlier report. No exploitation in the wild is mentioned.

Explicação gerada por IA a partir da matéria e dos artigos, em 29/10/2026 13:21.

Detalhes técnicos

  • Affected: Firefox for iOS < 156.1.
  • Impact: data integrity compromise, security policy bypass.

Remediação

  • Update to Firefox for iOS 156.1 per Mozilla bulletin mfsa2026-117.

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 26/10/2026 21:00 · coletado 29/10 13:01 primeiro registro

    CERT-FR advisory: multiple vulnerabilities in Mozilla Firefox for iOS before 156.1

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1391 on 27 October 2026 covering multiple vulnerabilities in Mozilla Firefox, specifically Firefox for iOS versions prior to 156.1. Exploitation can lead to data integrity compromise and security policy bypass. The flaws are tracked as CVE-2026-116631 and CVE-2026-116632, disclosed in Mozilla security bulletin mfsa2026-117 of 26 October 2026. No exploitation in the wild, CVSS scores or IOCs are mentioned.

    Technical Details

    • Affected: Firefox for iOS < 156.1.
    • Impact: data integrity compromise, security policy bypass.

    Remediation

    • Update to Firefox for iOS 156.1 per Mozilla bulletin mfsa2026-117.