CVE-2025-14744

—

CVSS 3.1

6.5 medium

EPSS

<1%p10

Published

Dec 18, 2025 (Dec 18, 2025)

Modified

Jun 17, 2026

Description

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.

Vendors: mozilla
Products: firefox
Weakness: CWE-451
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.