VULNERABILITY INTELLIGENCE
CVE-2025-55028
CVSS score6.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-08-19
Last modified2026-10-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-400
Primary references
- security@mozilla.org — Issue Tracking, Permissions Required
- security@mozilla.org — Vendor Advisory