CVE-2024-10474: Mozilla Firefox Focus

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.

Affected products

• Mozilla Firefox Focus: before 132.0 (fixed in 132.0)

Published 2024-10-29. Last modified 2026-06-17.