CVE-2025-55033

Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly

CVSS 6.1 MEDIUMEPSS 0.2%CWE-79

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.1EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 ago 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Productos afectados

Mozilla · Focus for iOS

Referencias

https://bugzilla.mozilla.org/show_bug.cgi?id=1913825 https://www.mozilla.org/security/advisories/mfsa2025-69/