CVE-2024-10474

6.5 mediumEPSS 0.3%

Medium (6.5) in mozilla firefox focus. EPSS 0.3% chance of exploitation in the next 30 days.

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2024-10-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox_focus

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1863832
https://www.mozilla.org/security/advisories/mfsa2024-60/

Check your stack JSON