CVEvulnerability

CVE-2025-54143

9.8 CRITICAL Published 2025-08-19 Modified 2026-10-05 Official page ↗
Status
Modified
Published
2025-08-19
Last modified
2026-10-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-693

Description

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page. This vulnerability was fixed in Firefox for iOS 141.

Affected configurations

• mozilla firefox (< 141.0)

Related

Weakness · CWE (1)

  • CWE-693 Protection Mechanism Failure weakness

References