Mozilla

Security Vulnerabilities fixed in Firefox for iOS 156.1

MFSA2026-117 Oct 26, 2026 Source: Vendor

Imported from Mozilla security advisory MFSA2026-117. Draft.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-117/

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines

Showing 1–2 of 2

CVE-2026-116632 BR2026-0000-033865 unclaimed

Moderate: Facetime protocol handler enabled spoofing

Credited as xisigr

CVE-2026-116631 BR2026-0000-033866 unclaimed

Low: External protocol handler (tel:) address bar spoof

Credited as Yuyang Zhou