{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2025-55028",
        "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "state": "PUBLISHED",
        "assignerShortName": "mozilla",
        "dateReserved": "2025-08-05T13:26:34.685Z",
        "datePublished": "2025-08-19T20:52:49.372Z",
        "dateUpdated": "2026-04-13T14:31:51.918Z"
    },
    "containers": {
        "cna": {
            "affected": [
                {
                    "product": "Firefox for iOS",
                    "vendor": "Mozilla",
                    "versions": [
                        {
                            "status": "unaffected",
                            "version": "142",
                            "lessThanOrEqual": "*",
                            "versionType": "rpm"
                        }
                    ]
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability was fixed in Firefox for iOS 142."
                        }
                    ]
                }
            ],
            "title": "JavaScript alerts could impede UI interaction or allow denial of service attacks",
            "references": [
                {
                    "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1850240"
                },
                {
                    "url": "https://www.mozilla.org/security/advisories/mfsa2025-68/"
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "value": "Antoine Morin"
                }
            ],
            "providerMetadata": {
                "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
                "shortName": "mozilla",
                "dateUpdated": "2026-04-13T14:31:51.918Z"
            }
        },
        "adp": [
            {
                "problemTypes": [
                    {
                        "descriptions": [
                            {
                                "type": "CWE",
                                "cweId": "CWE-400",
                                "lang": "en",
                                "description": "CWE-400 Uncontrolled Resource Consumption"
                            }
                        ]
                    }
                ],
                "metrics": [
                    {
                        "cvssV3_1": {
                            "scope": "UNCHANGED",
                            "version": "3.1",
                            "baseScore": 6.5,
                            "attackVector": "NETWORK",
                            "baseSeverity": "MEDIUM",
                            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                            "integrityImpact": "NONE",
                            "userInteraction": "REQUIRED",
                            "attackComplexity": "LOW",
                            "availabilityImpact": "HIGH",
                            "privilegesRequired": "NONE",
                            "confidentialityImpact": "NONE"
                        }
                    },
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2025-08-20T14:01:54.612039Z",
                                "id": "CVE-2025-55028",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "no"
                                    },
                                    {
                                        "Technical Impact": "partial"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2025-08-20T15:17:20.670Z"
                }
            }
        ]
    }
}