CVE-2025-11718

Description

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event This vulnerability affects Firefox < 144.

PUBLISHED Reserved 2025-10-13 | Published 2025-10-14 | Updated 2025-10-30 | Assigner mozilla

Product status

Credits

Hafiizh & kang ali

References

bugzilla.mozilla.org/show_bug.cgi?id=1980808

www.mozilla.org/security/advisories/mfsa2025-81/

cve.org (CVE-2025-11718)

nvd.nist.gov (CVE-2025-11718)

Download JSON