Vulnerability in Mozilla Firefox for iOS

[ Description ]Official description

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.

[ Fixes ]Fixes and patches

• Security bulletin: Mozilla mfsa2026-117Vendor patch or bulletin · CERT-FR · mozilla.org/en-US/security/advisories/mfsa2026-117, cited by CERT-FR CERTFR-2026-AVI-1391

[ Advisories ]Government CERT advisories

• CERT-FR27 Oct 2026CERTFR-2026-AVI-1391

  Multiple vulnerabilities in Mozilla Firefox Translated from French

  Multiple vulnerabilities have been discovered in Mozilla Firefox. They allow an attacker to cause a breach of data integrity and a security policy bypass.

  CVE-2026-116632CVE-2026-116631
• BSI CERT-Bund26 Oct 2026WID-SEC-2026-4167

  Mozilla Firefox (iOS): Multiple vulnerabilities allow displaying false information Translated from German

  CVE-2026-116631CVE-2026-116632

[ References ]References

• bugzilla.mozilla.org/show_bug.cgi
• www.mozilla.org/security/advisories/mfsa2026-117