Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks. This vulnerability affects Firefox for iOS versions less than 142.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-55029 |
Exploitation
To exploit this vulnerability, an attacker can craft malicious scripts that bypass the popup blocker in Firefox for iOS, leading to the opening of multiple tabs. This can overwhelm the user’s device, resulting in a denial of service.
Affected Products
- Firefox for iOS < 142: Affected by the vulnerability allowing malicious scripts to bypass popup blockers.
Mitigation
To mitigate this vulnerability, users should update their Firefox for iOS to the latest version to ensure that the popup blocker is functioning correctly and to prevent potential denial of service attacks.