CVE-2025-10290

EPSS 0.03%
Published 16.09.2025 12:26:39
Last modified 19.09.2025 20:56:01
Source security@mozilla.org
Teams watchlist Login
Open Login

Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press This vulnerability affects Focus for iOS < 143.0.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Focus SwPlatformiphone_os Version < 143.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.057

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-451 User Interface (UI) Misrepresentation of Critical Information

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

https://bugzilla.mozilla.org/show_bug.cgi?id=1975566

Issue Tracking

Permissions Required

https://www.mozilla.org/security/advisories/mfsa2025-76/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-10290

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-10290

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-10290

EUVD