Question 1

What is CVE-2026-13356 — CVE-2026-13356?

Accepted Answer

A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3.

Question 2

What is the authoritative source for CVE-2026-13356?

Accepted Answer

CVE-2026-13356 (CVE-2026-13356) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-13356CVE-2026-13356

Description

Scoring