A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS…

Medium CVSS 6.5

CVECVE-2020-15662

First seen2026-08-19 16:15 UTC

Disclosed2020-08-10 18:15 UTC

Last updated2026-08-19 16:15 UTC

Channel statusauto

Summary

A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS < 28.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://bugzilla.mozilla.org/show_bug.cgi?id=1653827 Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2020-34/ Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1653827 Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2020-34/ Vendor Advisory

Timeline

2026-08-19 nvd_ingest NVD