Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.
CVE-2026-103417
NONE
Updated Oct 13, 2026
Firefox
CVE Details
CVE ID
CVE-2026-103417
Published Date
Oct 13, 2026
Vendor
Firefox
Severity
NONE
Impact
Minimal impact
Source
View Advisory