{"metadata": {"vulnerability": "CVE-2026-103418", "count": 18, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-30T14:48:16.869Z", "date_only": false, "value": "2026-09-30T14:48:16.869Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-103418", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": true, "value": "2026-10-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1297", "record": "CERTFR-2026-AVI-1297", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1297", "record": "CERTFR-2026-AVI-1297", "field": "last_revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1297", "record": "CERTFR-2026-AVI-1297", "field": "initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-103418", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103418", "record": "FKIE_CVE-2026-103418", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1297", "record": "CERTFR-2026-AVI-1297", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-13T07:19:09.898Z", "date_only": false, "value": "2026-10-13T07:19:09.898Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-103418", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T07:19:09.898Z", "date_only": false, "value": "2026-10-13T07:19:09.898Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mozilla", "record": "CVE-2026-103418", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T07:39:35.011Z", "date_only": false, "value": "2026-10-13T07:39:35.011766Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432462234870556", "record": "CVE-2026-103418", "field": "creation_timestamp", "uuid": "c1154f7e-dac4-4f15-9237-9d1000498885", "content": "CVE-2026-103418 Universal XSS via the HTML language attribute in Translation Services Firefox for iOS directly interpolated the page\u2019s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox\u2019s privileged content world and bypass the page\u2019s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103418https://bugzilla.mozilla.org/show_bug.cgi?id=2062109https://www.mozilla.org/security/advisories/mfsa2026-105/#Mozilla #FirefoxforiOS#CVE_2026_103418#bot", "url": "https://infosec.exchange/users/cve/statuses/117432462234870556"}, {"timestamp": "2026-10-13T08:16:59Z", "date_only": false, "value": "2026-10-13T08:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7FW9-G4RG-XVQV", "record": "GHSA-7FW9-G4RG-XVQV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T08:16:59.560Z", "date_only": false, "value": "2026-10-13T08:16:59.560", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103418", "record": "FKIE_CVE-2026-103418", "field": "published"}, {"timestamp": "2026-10-13T09:30:45Z", "date_only": false, "value": "2026-10-13T09:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7FW9-G4RG-XVQV", "record": "GHSA-7FW9-G4RG-XVQV", "field": "published"}, {"timestamp": "2026-10-13T15:32:06Z", "date_only": false, "value": "2026-10-13T15:32:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7FW9-G4RG-XVQV", "record": "GHSA-7FW9-G4RG-XVQV", "field": "modified"}, {"timestamp": "2026-10-14T03:58:53.731Z", "date_only": false, "value": "2026-10-14T03:58:53.731Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-103418", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T03:58:53.731Z", "date_only": false, "value": "2026-10-14T03:58:53.731Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-103418", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T04:18:08.707Z", "date_only": false, "value": "2026-10-14T04:18:08.707", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103418", "record": "FKIE_CVE-2026-103418", "field": "lastModified"}, {"timestamp": "2026-10-14T20:00:00Z", "date_only": false, "value": "2026-10-14T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20261015", "record": "CVE-2026-103418", "field": "creation_timestamp", "uuid": "626524f1-5dc6-4224-a772-19e08b811241", "url": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20261015"}]}