Medium severity4.3NVD Advisory· Published Feb 16, 2026· Updated Jun 17, 2026
CVE-2026-2032
CVE-2026-2032
Description
Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: = 147.2.1
- osv-coords3 versions
< 0+ 2 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
Patches
Vulnerability mechanics
References
2- www.mozilla.org/security/advisories/mfsa2026-09/nvdVendor Advisory
- bugzilla.mozilla.org/show_bug.cginvdIssue TrackingPermissions Required
News mentions
0No linked articles in our index yet.