CVE-2026-14906

MEDIUM 5.3CVE-2026-14906 · Published 13/07/2026 · updated 24/10/2026

In short

CVE-2026-14906 is a MEDIUM (CVSS 5.3) vulnerability affecting firefox mobile (mozilla).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.7% of all vulnerabilities.
Fix: update to 152.4 or later.

Package	Affected versions	Patched versions
firefox mobile mozilla	`< 152.4`	`152.4`

Description

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.

References

bugzilla.mozilla.org/show_bug.cgi · Permissions Required
mozilla.org/security/advisories/mfsa2026-66 · Vendor Advisory

More vulnerabilities in firefox mobile

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free