CVE-2023-49060
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.64%
- 48th pct
- KEV
- No
- Class
- other
- NVD-CWE-noinfo
Description
An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.
References
Status: profiled · ingested 2026-08-19T18:00:49.000Z