Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

Medium CVSS 6.1

CVECVE-2024-43111

First seen2026-08-19 16:31 UTC

Disclosed2024-08-06 16:15 UTC

Last updated2026-08-19 16:31 UTC

Channel statusauto

Summary

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS < 129.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://bugzilla.mozilla.org/show_bug.cgi?id=1874907 Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2024-36/ Vendor Advisory

Timeline

2026-08-19 nvd_ingest NVD