CVE-2025-54143

EPSS 0.11%
Veröffentlicht 19.08.2025 20:52:47
Zuletzt bearbeitet 21.08.2025 18:39:55
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page This vulnerability affects Firefox for iOS < 141.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwPlatformiphone_os Version < 141.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.297

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://bugzilla.mozilla.org/show_bug.cgi?id=1912671

Issue Tracking

Permissions Required

https://www.mozilla.org/security/advisories/mfsa2025-60/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-54143

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-54143

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-54143

EUVD