{"id":"CVE-2026-103418","published":"2026-10-13T08:16:59.560","lastModified":"2026-10-14T04:18:08.707","description":"Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2062109","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-105/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Firefox for iOS was vulnerable to cross-site scripting (XSS) due to improper sanitization of HTML language attributes during translation processes, allowing attackers to inject malicious JavaScript that could execute in a privileged context and bypass Content Security Policy restrictions.","exploitability":"Exploitation requires a victim to visit a malicious webpage with a crafted HTML language attribute, making it moderately difficult but possible with social engineering.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code in Firefox's privileged content world, potentially leading to full browser compromise and data exfiltration.","remediation":"Upgrade to Firefox for iOS 157.1 or later","detection":"No reliable host or network indicator is derivable from the published description.","tags":["xss","mobile","browser","csp-bypass"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:03:13.437Z"}}