CVE-2025-54143
CRITICALFirefox for iOS < 141 - Info Disclosure
Title source: llmDescription
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page This vulnerability affects Firefox for iOS < 141.
Scores
CVSS v3
9.8
EPSS
0.0009
EPSS Percentile
24.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-693
Status
published
Affected Products (1)
mozilla/firefox
< 141.0
Timeline
Published
Aug 19, 2025
Tracked Since
Feb 18, 2026