Mozilla Focus for iOS vulnerabilities

20 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Exploited Mozilla Focus for iOS vulnerabilities

CVE-2026-8945 — Sandbox escape in Firefox and Firefox Focus for Android (CVSS 7.5)
CVE-2026-2919 — Attacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirect (CVSS 4.3)
CVE-2025-10290 — Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites (CVSS 6.5)
CVE-2025-55033 — Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly (CVSS 6.1)
CVE-2025-55032 — Focus incorrectly ignores Content-Disposition headers for some MIME types (CVSS 6.1)
CVE-2025-55031 — Passkey phishing within Bluetooth range (CVSS 9.8)
CVE-2025-3859 — Firefox Focus elide URL allows address bar spoofing (CVSS 6.1)
CVE-2024-10474 — (CVSS 6.5)
CVE-2024-8399 — (CVSS 4.7)
CVE-2024-5022 — (CVSS 4.4)
CVE-2024-26284 — (CVSS 6.1)
CVE-2024-1563 — (CVSS 8.1)
CVE-2024-0606 — (CVSS 6.1)
CVE-2024-0605 — (CVSS 7.5)
CVE-2023-6870 — (CVSS 4.3)
CVE-2023-29546 — (CVSS 6.5)
CVE-2023-29534 — (CVSS 9.1)
CVE-2023-25743 — (CVSS 7.5)
CVE-2022-26486 — Mozilla Firefox Use-After-Free Vulnerability (CVSS 9.6) — exploited
CVE-2022-26485 — Mozilla Firefox Use-After-Free Vulnerability (CVSS 8.8) — exploited