CVE-2025-54143

EPSS 0.11%
Published 19.08.2025 20:52:47
Last modified 21.08.2025 18:39:55
Source security@mozilla.org
Teams watchlist Login
Open Login

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page This vulnerability affects Firefox for iOS < 141.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwPlatformiphone_os Version < 141.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.11%	0.297

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://bugzilla.mozilla.org/show_bug.cgi?id=1912671

Issue Tracking

Permissions Required

https://www.mozilla.org/security/advisories/mfsa2025-60/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-54143

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-54143

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-54143

EUVD