{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amozillafirefoxiphone_os/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*"],"_cs_cves":[{"id":"CVE-2026-116631"},{"id":"CVE-2026-116632"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Firefox for iOS (\u003c 156.1)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","browser"],"_cs_type":"advisory","_cs_vendors":["Mozilla"],"content_html":"\u003cp\u003eMultiple vulnerabilities have been identified in Mozilla Firefox for iOS versions prior to 156.1. These flaws, documented in Mozilla Security Advisory MFSA2026-117, can be leveraged to achieve data integrity compromise and bypass security policy enforcement. No specific in-the-wild exploitation has been publicly confirmed as of the reporting date.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation could result in the compromise of browser data integrity and the bypass of established security policies, potentially leading to unauthorized access or modification of sensitive information processed by the browser.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all mobile devices within the organization utilizing Firefox for iOS.\u003c/li\u003e\n\u003cli\u003eUpgrade Firefox for iOS to version 156.1 or later immediately to address CVE-2026-116631 and CVE-2026-116632.\u003c/li\u003e\n\u003cli\u003eConsult the Mozilla Security Advisory MFSA2026-117 for detailed remediation steps and technical depth.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T17:39:20Z","date_published":"2026-10-27T17:39:20Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mozilla-firefox-vulns/","summary":"Multiple vulnerabilities in Firefox for iOS versions prior to 156.1, detailed in MFSA2026-117, allow for data integrity compromise and security policy bypass.","title":"Mozilla Firefox: Multiple vulnerabilities in Firefox for iOS (CVE-2026-116631, CVE-2026-116632)","url":"https://feed.craftedsignal.io/briefs/2026-10-mozilla-firefox-vulns/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*","version":"https://jsonfeed.org/version/1.1"}