CVE-2025-27425mediumCWE-287

CVE-2025-27425: falha de média gravidade em Mozilla Firefox for iOS

QR code user confirmation bypass with invalid protocol

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Firefox

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first. This vulnerability was fixed in Firefox for iOS 136.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Mozilla · Firefox for iOS
CVEs relacionadas — Mozilla Firefox for iOS

No mesmo produto, das mais perigosas para as menos.

CVE-2020-6830—CVE-2020-6830EPSS 0.9%CVE-2020-15661—CVE-2020-15661EPSS 0.9%CVE-2020-12404—CVE-2020-12404EPSS 0.8%CVE-2020-15662—CVE-2020-15662EPSS 0.7%CVE-2020-12414—CVE-2020-12414EPSS 0.7%CVE-2021-29958—CVE-2021-29958EPSS 0.7%