PT-2025-39982 · Mozilla · Firefox For Ios

Muneaki Nishimura · Published 2025-09-30 · Updated 2025-09-30 · CVE-2025-10859

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 143.1

Description A flaw existed in how Firefox for iOS handled cookie storage for non-HTML temporary documents. This resulted in incorrect sharing of cookie storage between non-HTML temporary documents and normal browsing content. Consequently, information from private tabs could potentially leave Incognito mode, even after all tabs were closed.

Recommendations Update to Firefox for iOS version 143.1 or later.

Fix

Weakness Enumeration

CWE-359

Related Identifiers

CVE-2025-10859

Affected Products

Firefox For Ios

References · 6

• https://mozilla.org/security/advisories/mfsa2025-79 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10859 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10859 · Security Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1684624 · Note
• https://twitter.com/CVEnew/status/1973012010729193877 · Twitter Post
• https://t.me/CVEtracker/33720 · Telegram Post