CVE-2026-11799
Awaiting Analysis Awaiting Analysis - Queue

UXSS in Focus for iOS and Klar WebKit

Publication date: 2026-06-09

Last updated on: 2026-06-10

Assigner: Mozilla Corporation

Description
UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-09
Last Modified
2026-06-10
Generated
2026-06-30
AI Q&A
2026-06-10
EPSS Evaluated
2026-06-28
NVD
CVE-2026-11799

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
mozilla focus_for_ios 151.3.1
mozilla klar_for_ios 151.3.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a UXSS (Universal Cross-Site Scripting) issue found in the Focus and Klar web browsers for iOS. It affects the WebKit navigation component used by these browsers. The vulnerability was addressed and fixed in version 151.3.1 of both Focus and Klar for iOS.

Impact Analysis

A UXSS vulnerability can allow an attacker to execute malicious scripts in the context of trusted websites when using the affected browsers. This can lead to unauthorized actions such as stealing sensitive information, session hijacking, or manipulating web content, potentially compromising user security and privacy.

Mitigation Strategies

To mitigate this vulnerability, update Focus for iOS and Klar for iOS to version 151.3.1 or later, where the issue has been fixed.

Compliance Impact

The provided information does not specify how the UXSS vulnerability in Focus for iOS and Klar for iOS affects compliance with common standards and regulations such as GDPR or HIPAA.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-11799. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart