CVE-2026-14906: Vulnerability in Mozilla Firefox for iOS
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.
AI Analysis
Technical Summary
This vulnerability involves the potential for malicious webpage titles to cause saved PDF content to overwrite existing PDF files or bundled resources within the Firefox for iOS sandbox environment. The flaw could be triggered by saving webpages as PDFs with crafted titles. Mozilla fixed this issue in Firefox for iOS version 152.4, mitigating the risk of unauthorized overwriting of application content.
Potential Impact
The impact is low as the vulnerability allows overwriting of PDF files or bundled content within the Firefox for iOS sandbox, which is a restricted environment. There is no indication of remote code execution or broader system compromise. The overwrite capability could lead to content tampering within the app's sandbox but does not extend beyond it.
Mitigation Recommendations
Users and administrators should update Firefox for iOS to version 152.4 or later, where this vulnerability is fixed. No additional mitigation steps are required as the vendor has provided an official fix.
CVE-2026-14906: Vulnerability in Mozilla Firefox for iOS
Description
Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.
CVSS v3.1
Score 5.3medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves the potential for malicious webpage titles to cause saved PDF content to overwrite existing PDF files or bundled resources within the Firefox for iOS sandbox environment. The flaw could be triggered by saving webpages as PDFs with crafted titles. Mozilla fixed this issue in Firefox for iOS version 152.4, mitigating the risk of unauthorized overwriting of application content.
Potential Impact
The impact is low as the vulnerability allows overwriting of PDF files or bundled content within the Firefox for iOS sandbox, which is a restricted environment. There is no indication of remote code execution or broader system compromise. The overwrite capability could lead to content tampering within the app's sandbox but does not extend beyond it.
Mitigation Recommendations
Users and administrators should update Firefox for iOS to version 152.4 or later, where this vulnerability is fixed. No additional mitigation steps are required as the vendor has provided an official fix.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mozilla
- Date Reserved
- 2026-07-06T21:26:25.464Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://www.mozilla.org/security/advisories/mfsa2026-66/","vendor":"Mozilla"}]
Threat ID: 6a55366a68715ace43b0b296
Added to database: 07/13/2026, 19:03:06 UTC
Last enriched: 07/13/2026, 19:17:55 UTC
Last updated: 07/13/2026, 21:23:11 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.