Mozilla Focus

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-3859fixed in 138Firefox Focus elide URL allows address bar spoofingMEDIUM 6.10.2 %
CVE-2022-26486unspecified – < 97.3.0An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attaCRITICAL 9.62.4 %KEV
CVE-2022-26485unspecified – < 97.3.0Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abHIGH 8.814 %KEV