Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-14744

Опубликовано: 18 дек. 2025
Источник: debian
EPSS Низкий

Описание

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxnot-affectedpackage

EPSS

Процентиль: 11%
0.00206
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
11 месяцев назад

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.

CVSS3: 6.5
nvd
11 месяцев назад

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.

CVSS3: 6.5
github
11 месяцев назад

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS < 144.0.

CVSS3: 6.5
fstec
11 месяцев назад

Уязвимость компонента Downloads (Загрузки) браузера Firefox операционных систем iOS, позволяющая нарушителю проводить спуфинг-атаки

EPSS

Процентиль: 11%
0.00206
Низкий