CVE-2026-86853
published 2026-09-08CVE-2026-86853: A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS…
PriorityP418medium4.3CVSS 3.1
AVNACLPRNUIRSUCNINAL
EPSS
0.28%
20.0th percentile
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox_for_ios | < Firefox for iOS 155.1 | Firefox for iOS 155.1 |
| mozilla | firefox_mobile | < 155.1 | 155.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches.
ghsa_unreviewed·2026-09-08
CVE-2026-86853 [MEDIUM] CWE-451 A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches.
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
Mozilla
Mozilla Foundation Security Advisory 2026-89: CVE-2026-86853
vendor_mozilla·CVSS 4.3
CVE-2026-86853 [MEDIUM] Mozilla Foundation Security Advisory 2026-89: CVE-2026-86853
Mozilla Foundation Security Advisory 2026-89
CVE: CVE-2026-86853
Product: Firefox for iOS
Impact: low
Fixed in: Firefox for iOS 155.1
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-08
Published