CVE-2025-55033: Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly
Published Aug 19, 2025
·Updated
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks
Affected Software
3 affected components
All of the following
Mozilla Focus=142
Apple iOS
Mozilla Firefox Focus Iphone Os<142.0
Event History
Aug 19, 2025
CVE Published
via Mozilla·12:00 AM
Data Sourced
via Mozilla·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·08:52 PM
Data Sourced
via MITRE·08:52 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2025-55033?
CVE-2025-55033 is considered a high severity vulnerability due to its potential to allow XSS attacks.
2
How do I fix CVE-2025-55033?
To fix CVE-2025-55033, update to the latest version of Mozilla Focus that addresses this vulnerability.
3
What software is impacted by CVE-2025-55033?
CVE-2025-55033 impacts Mozilla Focus for iOS version 142.
4
What kind of attack does CVE-2025-55033 facilitate?
CVE-2025-55033 facilitates XSS attacks by allowing malicious scripts to be executed through dragged JavaScript links.
5
What should users of Mozilla Focus for iOS do regarding CVE-2025-55033?
Users of Mozilla Focus for iOS should ensure their app is updated to the latest version to mitigate CVE-2025-55033.