PT-2025-33840 · Mozilla+2 · Firefox Esr+3

Renwa · Published 2025-08-19 · Updated 2025-11-19 · CVE-2025-9183

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 142 Firefox ESR versions prior to 140.2

Description: A spoofing issue exists in the Address Bar component.

Recommendations: Update Firefox to version 142 or later. Update Firefox ESR to version 140.2 or later.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

ALT-PU-2025-11100

ALT-PU-2025-12562

ALT-PU-2025-14599

BDU:2025-10501

CVE-2025-9183

OESA-2025-2340

OESA-2025-2341

OESA-2025-2359

OESA-2025-2360

OESA-2025-2361

OPENSUSE-SU-2025:15467-1

OPENSUSE-SU-2025:15516-1

SUSE-SU-2025:03008-1

SUSE-SU-2025:03009-1

SUSE-SU-2025_03008-1

SUSE-SU-2025_03009-1

Affected Products

Alt Linux

Firefox

Firefox Esr

Suse

References · 62

• https://mozilla.org/security/advisories/mfsa2025-67 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-9183 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10533 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-64/#CVE-2025-9183 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15516-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2359 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2340 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-64 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2361 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10527 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03009-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10536 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-8037 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-8040 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10537 · Security Note