VULNERABILITY INTELLIGENCE

CVE-2025-14744

CVSS score6.5 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2025-12-18
Last modified2026-10-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.

Weakness classification

  • CWE-451: User Interface (UI) Misrepresentation of Critical Information

Primary references