Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability affects Firefox for iOS < 147.2.1.CreditsQadhafy Muhammad TeraReferenceshttps://bugzilla.mozilla.org/show_bug.cgi?id=2012152https://www.mozilla.org/security/advisories/mfsa2026-09/
