CVE-2025-54144: Mozilla Firefox

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked into clicking a link. This vulnerability was fixed in Firefox for iOS 141.

Affected products

• Mozilla Firefox: before 141.0 (fixed in 141.0)

Published 2025-08-19. Last modified 2026-10-05.