PT-2025-37927 · Unknown · Focus For Ios

Renwa · Published 2025-09-16 · Updated 2025-09-16 · CVE-2025-10290

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Focus for iOS versions prior to 143.0

Description Opening links via the contextual menu for certain URL schemes would fail to load, but the toolbar would not refresh correctly. This could allow attackers to spoof websites if users were coerced into opening a link explicitly through a long-press.

Recommendations Update Focus for iOS to version 143.0 or later.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

CVE-2025-10290

Affected Products

Focus For Ios

References · 6

• https://mozilla.org/security/advisories/mfsa2025-76 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10290 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10290 · Security Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1975566 · Note
• https://twitter.com/RenwaX23/status/1967980381438951883 · Twitter Post
• https://twitter.com/CVEnew/status/1967965119721488643 · Twitter Post