CVE-2024-26281

2024-02-2215:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-26281

javascript uri

qr code scanner

unauthorized scripts

top origin sites

url bar

firefox for ios

AI Score

6.5

Confidence

Low

EPSS

Percentile

9.0%

JSON

Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS < 123.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 130.0.1-1firefox_130.0.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	999	all	firefox	< 130.0.1-1	firefox_130.0.1-1_all.deb