CVE-2026-9078

Vulnerability Description

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This vulnerability was fixed in Firefox for iOS 151.1.

Vulnerability Details

Published Date

May 25, 2026

Last Modified

May 25, 2026

Source

NVD

External References

https://bugzilla.mozilla.org/show_bug.cgi?id=2029371
https://www.mozilla.org/security/advisories/mfsa2026-52/

CVE-2026-9078

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment