CVE-2026-11799: Vulnerability in Mozilla Focus for iOS
UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.
AI Analysis
Technical Summary
CVE-2026-11799 describes a Universal Cross-Site Scripting (UXSS) vulnerability in Mozilla Focus for iOS and Klar for iOS, specifically within their WebKit navigation components. The vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected applications, potentially leading to high impact on confidentiality. The vulnerability was reported by Renwa Hiwa and tracked as Bug 1975667. Mozilla fixed this issue in version 151.3.1 of both Focus for iOS and Klar for iOS.
Potential Impact
The vulnerability has a CVSS score of 7.5 (high) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating that it is remotely exploitable without privileges or user interaction and results in a high impact on confidentiality. There is no impact on integrity or availability. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix is available in Mozilla Focus for iOS and Klar for iOS version 151.3.1. Users and administrators should update to these versions to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.
CVE-2026-11799: Vulnerability in Mozilla Focus for iOS
Description
UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.
CVSS v3.1
Score 7.5high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-11799 describes a Universal Cross-Site Scripting (UXSS) vulnerability in Mozilla Focus for iOS and Klar for iOS, specifically within their WebKit navigation components. The vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected applications, potentially leading to high impact on confidentiality. The vulnerability was reported by Renwa Hiwa and tracked as Bug 1975667. Mozilla fixed this issue in version 151.3.1 of both Focus for iOS and Klar for iOS.
Potential Impact
The vulnerability has a CVSS score of 7.5 (high) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating that it is remotely exploitable without privileges or user interaction and results in a high impact on confidentiality. There is no impact on integrity or availability. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix is available in Mozilla Focus for iOS and Klar for iOS version 151.3.1. Users and administrators should update to these versions to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mozilla
- Date Reserved
- 2026-06-09T13:59:49.244Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://www.mozilla.org/security/advisories/mfsa2026-55/","vendor":"Mozilla"}]
Threat ID: 6a2881578dd33fbd857f8e9b
Added to database: 06/09/2026, 21:10:47 UTC
Last enriched: 06/17/2026, 08:54:39 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 143
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.