Autofill Credential Exposure in Firefox for iOS by Mozilla

CVE-2026-103417

What is CVE-2026-103417?

A vulnerability in Firefox for iOS allowed saved credentials to be autofilled into a new page without being restricted by the original page's context. This occurred during cross-origin navigation while the saved-login user interface was displayed, potentially exposing sensitive information. Mozilla addressed this issue in version 157.1, enhancing security measures to ensure autofill behavior is bound to the originating page's context.

References