CVE-2026-86853
CVE-2026-86853
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-86853?
- CVE-2026-86853 is a medium-severity vulnerability, classified under User Interface (UI) Misrepresentation of Critical Information. CVSS score: 4.3/10. Published 2026-09-08.
- How severe is CVE-2026-86853?
- Medium severity. CVSS v3 base score is 4.3 out of 10.