CVE-2026-103417 – Firefox for iOS could autofill saved credentials into a new page if cross-origin navigatio

Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.