CVE-2025-10290
Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS 143.0.
| Vendor | mozilla |
| Product | focus for ios |
| Ecosystems | |
| Industries | Technology |
| Published | Sep 16, 2025 |
| Last Updated | Apr 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for mozilla focus for ios
Be the first to know when new medium vulnerabilities affecting mozilla focus for ios are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Mozilla / Focus for iOS
All versions affected References
Credits
Renwa