CVE-2026-14906 — Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for…

CVE-2026-14906

Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS PUBLISHED

Description (CNA)

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.

Affected (CNA)

Vendor / product	Versions
Mozilla / Firefox for iOS	unaffected 152.4 through *

CWE

No CWE identifiers supplied.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2045842
https://www.mozilla.org/security/advisories/mfsa2026-66/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.