Muneaki Nishimura

Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127.

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.

Red Hat Security Advisory: firefox security update

Red Hat Security Advisory: thunderbird security update

Sensitive user data could be leaked to other applications through Reader mode

Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injection

Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order

Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS