CVE-2025-55032

6.1 mediumEPSS 0.2%

Medium (6.1) in mozilla firefox focus. EPSS 0.2% chance of exploitation in the next 30 days.

Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2025-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox_focus

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1976296
https://www.mozilla.org/security/advisories/mfsa2025-69/

Check your stack JSON