CVE-2024-5022: Mozilla Firefox Focus

Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days.

The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in the location bar This vulnerability affects Focus for iOS < 126.

Affected products

• Mozilla Firefox Focus: before 126.0 (fixed in 126.0)

Published 2024-05-17. Last modified 2026-06-17.