Back to Database
Status published
Unknown
CVE-2025-55033
Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly
Vulnerability Description
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-55033
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Muneaki Nishimura
References
More from Mozilla
View All →CVE-2025-9187
Memory safety bugs fixed in Firefox 142 and Thunderbird 142
Unknown
0
CVE-2025-9186
Spoofing issue in the Address Bar component of Firefox Focus for Android
Unknown
0
CVE-2025-9185
Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
Unknown
0
CVE-2025-9184
Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
Unknown
0
CVE-2025-9183
Spoofing issue in the Address Bar component
Unknown
0
Affected Vendor
Mozilla
View all reports →Affected Software
Focus for iOS
Vulnerable Versions:
142
Timeline
Official Publish:
August 19th, 2025
Last Modified:
April 13th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.