CVE-2025-10290

EPSS 0.03%
Veröffentlicht 16.09.2025 12:26:39
Zuletzt bearbeitet 19.09.2025 20:56:01
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press This vulnerability affects Focus for iOS < 143.0.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Focus SwPlatformiphone_os Version < 143.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.057

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-451 User Interface (UI) Misrepresentation of Critical Information

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

https://bugzilla.mozilla.org/show_bug.cgi?id=1975566

Issue Tracking

Permissions Required

https://www.mozilla.org/security/advisories/mfsa2025-76/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-10290

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-10290

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-10290

EUVD