CVE-2026-13356

A vulnerability exists in Firefox and Java that allows a malicious webpage to disrupt a pending navigation by queuing a synchronous JavaScript dialog, misleading users by displaying the intended destination in the address bar while rendering attacker-controlled content. This could lead to phishing attacks or other malicious activities, making it crucial for users of affected browsers and Java applications to prioritize updates. Organizations that rely on Firefox for web access should implement the latest security patches to mitigate this risk.