Medium severity4.3NVD Advisory· Published Feb 16, 2026· Updated Apr 13, 2026
CVE-2026-2032
CVE-2026-2032
Description
Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <147.2.1
- osv-coords2 versions
< 0+ 1 more
- (no CPE)range: < 0
- (no CPE)range: < 0
Patches
Vulnerability mechanics
References
2- www.mozilla.org/security/advisories/mfsa2026-09/nvdVendor Advisory
- bugzilla.mozilla.org/show_bug.cginvdIssue TrackingPermissions Required
News mentions
0No linked articles in our index yet.