Mozilla Focus

• CVE-2022-26485 High 8.8 Exploited Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2 14.3%
• CVE-2022-26486 Critical 9.6 Exploited An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affect 2.4%
• CVE-2025-3859 Medium 4.3 Firefox Focus elide URL allows address bar spoofing 0.2%