Skip to content
Threat Feed
medium advisory

Mozilla Firefox: Multiple vulnerabilities in Firefox for iOS (CVE-2026-116631, CVE-2026-116632)

Multiple vulnerabilities in Firefox for iOS versions prior to 156.1, detailed in MFSA2026-117, allow for data integrity compromise and security policy bypass.

CVE search metadata

CVE search record: CVE-2026-116631. KEV: no. Product: Firefox for iOS (< 156.1). Brief: Mozilla Firefox: Multiple vulnerabilities in Firefox for iOS (CVE-2026-116631, CVE-2026-116632). Brief link: https://feed.craftedsignal.io/briefs/2026-10-mozilla-firefox-vulns/

CVE search record: CVE-2026-116632. KEV: no. Product: Firefox for iOS (< 156.1). Brief: Mozilla Firefox: Multiple vulnerabilities in Firefox for iOS (CVE-2026-116631, CVE-2026-116632). Brief link: https://feed.craftedsignal.io/briefs/2026-10-mozilla-firefox-vulns/

Triage facts

Revision 1
Applicability
Firefox for iOS (< 156.1)
Evidence
Unknown
Severity
Medium
Action
Elevated
Sources
4 public sources
Freshness
Revision 1Oct 27, 17:39 UTC
Vulnerabilities
2 CVEs
Source quality
A1Likely

Multiple vulnerabilities have been identified in Mozilla Firefox for iOS versions prior to 156.1. These flaws, documented in Mozilla Security Advisory MFSA2026-117, can be leveraged to achieve data integrity compromise and bypass security policy enforcement. No specific in-the-wild exploitation has been publicly confirmed as of the reporting date.

Impact

Successful exploitation could result in the compromise of browser data integrity and the bypass of established security policies, potentially leading to unauthorized access or modification of sensitive information processed by the browser.

Recommendation

  • Inventory all mobile devices within the organization utilizing Firefox for iOS.
  • Upgrade Firefox for iOS to version 156.1 or later immediately to address CVE-2026-116631 and CVE-2026-116632.
  • Consult the Mozilla Security Advisory MFSA2026-117 for detailed remediation steps and technical depth.

Immediate actions

Upgrade Firefox for iOS to version 156.1 or later

IT Operations 48h

Mitigations

Upgrade to Firefox for iOS 156.1

immediate IT Operations

CVE-2026-116631, CVE-2026-116632