CVE-2025-10290
published 2025-09-16CVE-2025-10290: Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers…
PriorityP431medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
EPSS
0.25%
16.6th percentile
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS 143.0.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | — | — |
| mozilla | firefox_focus | < 143.0 | 143.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Mozilla
Mozilla Foundation Security Advisory 2025-76: CVE-2025-10290
vendor_mozilla·CVSS 6.5
CVE-2025-10290 [MEDIUM] Mozilla Foundation Security Advisory 2025-76: CVE-2025-10290
Mozilla Foundation Security Advisory 2025-76
CVE: CVE-2025-10290
Product: Focus for iOS
Impact: moderate
Fixed in: Focus for iOS 143
VulDB
Mozilla Focus up to 142.x on iOS ui layer
vuldb·2026-10-25·CVSS 6.5
CVE-2025-10290 [MEDIUM] Mozilla Focus up to 142.x on iOS ui layer
A vulnerability was found in Mozilla Focus up to 142.x on iOS and classified as problematic. This impacts an unknown function. Executing a manipulation can lead to improper restriction of rendered ui layers.
The identification of this vulnerability is CVE-2025-10290. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.
GHSA
GHSA-hjm2-5w4g-m8j2: Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing at
ghsa_unreviewed·2025-09-16
CVE-2025-10290 [MEDIUM] CWE-451 GHSA-hjm2-5w4g-m8j2: Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing at
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press This vulnerability affects Focus for iOS < 143.0.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-09-16
Published