CVE-2025-10290

概要

参考情報

• bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
• mozilla.org/security/advisories/mfsa2025-76 · Vendor Advisory

firefox focus のその他の脆弱性

• CVE-2026-8945高 7.5Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.
• CVE-2026-2919中 4.3Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an …
• CVE-2025-55033中 6.1Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. …
• CVE-2025-55032中 6.1Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentiall…
• CVE-2025-55031緊急 9.8Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetoo…