Home

Description

Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs This vulnerability affects Firefox for iOS < 143.1.

PUBLISHED Reserved 2025-09-22 | Published 2025-09-30 | Updated 2025-10-30 | Assigner mozilla

Product status

Any version before 143.1
affected

Credits

Muneaki Nishimura

References

bugzilla.mozilla.org/show_bug.cgi?id=1684624

www.mozilla.org/security/advisories/mfsa2025-79/

cve.org (CVE-2025-10859)

nvd.nist.gov (CVE-2025-10859)

Download JSON