Vulnerabilidades do Mozilla Firefox Focus
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Mozilla Firefox Focus: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:mozilla:firefox_focus
CVE-2026-8945
Alta · 7.5
CWE-693 19/05/2026
Sandbox escape in Firefox and Firefox Focus for Android
Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.
CVE-2026-2919
Média · 4.3
CWE-451 09/03/2026
Attacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirect
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability was fixed in Focus for iOS 148.2.
CVE-2022-26485
Alta · 8.8
KEV Alta · 61 Exploit público CWE-416 22/12/2022
Mozilla Firefox Use-After-Free Vulnerability
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.
CVE-2022-26486
Crítica · 9.6
KEV Alta · 58 CWE-416 22/12/2022
Mozilla Firefox Use-After-Free Vulnerability
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.