CVE-2025-14744

EPSS 0.03%
Veröffentlicht 18.12.2025 14:21:12
Zuletzt bearbeitet 06.01.2026 16:32:04
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS < 144.0.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwPlatformiphone_os Version < 144.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.083

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-451 User Interface (UI) Misrepresentation of Critical Information

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

https://bugzilla.mozilla.org/show_bug.cgi?id=1984683

Permissions Required

https://www.mozilla.org/security/advisories/mfsa2025-97/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-14744

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-14744

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-14744

EUVD