CVE-2025-55028

CVE-2025-55028: JavaScript alerts could impede UI interaction or allow denial of service attacks

Published August 19, 2025
Last update April 13, 2026

CVSS base score

What the vulnerability does

Description

Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.

Key dates

Disclosure timeline

August 19, 2025 CVE published
April 13, 2026 Record updated