CVE-2025-27424 — Firefox Mobile iOS Address Bar Spoof Using Server-Side Redirect to non-http Scheme

CVE-2025-27424

Firefox Mobile iOS Address Bar Spoof Using Server-Side Redirect to non-http Scheme PUBLISHED

Description (CNA)

Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page. This vulnerability was fixed in Firefox for iOS 136.

Affected (CNA)

Vendor / product	Versions
Mozilla / Firefox for iOS	unaffected 136 through *

CWE

No CWE identifiers supplied.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1945392
https://www.mozilla.org/security/advisories/mfsa2025-13/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.