VULNERABILITY INTELLIGENCE

CVE-2025-54143

CVSS score9.8 CRITICAL
EPSS probability0.48%
CISA KEVNot currently listed
Published2025-08-19
Last modified2026-10-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page. This vulnerability was fixed in Firefox for iOS 141.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-693

Primary references