CVE-2025-55033: Mozilla Firefox Focus

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142.

Affected products

• Mozilla Firefox Focus: before 142.0 (fixed in 142.0)

Published 2025-08-19. Last modified 2026-06-17.