Denial of Service Vulnerability in Firefox for iOS by Mozilla
CVE-2025-55028

6.5MEDIUM

Key Information:

Vendor

Mozilla
Status
Firefox For iOS
Vendor
CVE Published:
19 August 2025

What is CVE-2025-55028?

A vulnerability has been identified in Firefox for iOS that allows attackers to deploy malicious scripts capable of triggering repetitive JavaScript alerts. This behavior can effectively hinder user interaction with the application, leading to potential denial of service situations where users are unable to use the application normally. This issue affects versions of Firefox for iOS prior to 142.

Affected Version(s)

Firefox for iOS < 142

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1850240
https://www.mozilla.org/security/advisories/mfsa2025-68/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Antoine Morin
.
CVE-2025-55028 : Denial of Service Vulnerability in Firefox for iOS by Mozilla