CVE-2025-55032

Summary

Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142.

Affected Software

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1976296
• https://www.mozilla.org/security/advisories/mfsa2025-69/

• ←Previous
• Next→