CVE-2025-55029

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
7.5HIGH
EPSS
0.1%
top 70.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla Firefox FOR IOSMozilla Firefox
Timeline
PublishedAug 19

Description

Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks This vulnerability affects Firefox for iOS < 142.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDmozilla/firefox< 142.0
▶CVEListV5mozilla/firefox_for_iosunspecified — 142

🔴Vulnerability Details

2
GHSA
GHSA-q779-hhj4-jvfq: Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks This vulnerability affects Firef↗2025-08-19
▶
CVEList
Malicious scripts could spam popups for denial of service attacks↗2025-08-19
▶

📋Vendor Advisories

1
Mozilla
Mozilla Foundation Security Advisory 2025-68: CVE-2025-55029↗
▶
CVE-2025-55029 (HIGH CVSS 7.5) | Malicious scripts could bypass the | cvebase.io