What is CVE-2025-14744?

CVE-2025-14744 is a medium-severity vulnerability in Mozilla Firefox, classified under User Interface (UI) Misrepresentation of Critical Information. CVSS score: 6.5/10. Published 2025-12-18.

How severe is CVE-2025-14744?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Mozilla Firefox

CVE-2025-14744

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144…

EPSS: 0.002 (7.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Mozilla Firefox
Mozilla Firefox For Ios — versions 144.0

Weakness classification (CWE)

CWE-451 — User Interface (UI) Misrepresentation of Critical Information

References

security@mozilla.org (Permissions Required)
security@mozilla.org (Vendor Advisory)

Frequently asked questions

What is CVE-2025-14744?: CVE-2025-14744 is a medium-severity vulnerability in Mozilla Firefox, classified under User Interface (UI) Misrepresentation of Critical Information. CVSS score: 6.5/10. Published 2025-12-18.
How severe is CVE-2025-14744?: Medium severity. CVSS v3 base score is 6.5 out of 10.