Muneaki Nishimura

Sensitive user data could be leaked to other applications through Reader mode

Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs

Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127.

Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. This vulnerability affects Firefox for iOS < 123.

If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking gam

Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS < 124.

Red Hat Security Advisory: firefox security update

Red Hat Security Advisory: thunderbird security update

Red Hat Security Advisory: firefox security update