VULNERABILITY INTELLIGENCE

CVE-2025-27424

CVSS score4.3 MEDIUM

EPSS probability0.26%

CISA KEVNot currently listed

Published2025-03-04

Last modified2026-10-05

Description

Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page. This vulnerability was fixed in Firefox for iOS 136.