PT-2025-41905 · Mozilla+1 · Firefox+1

Published 2025-10-14 · Updated 2026-04-15 · CVE-2025-11717

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144

Description When switching between Android apps using the card carousel, Firefox displays a black screen as its card image if a password-related screen was the last one used. Prior to version 144, the password edit screen was visible in this scenario.

Recommendations Update to Firefox version 144 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2025-13476

BDU:2025-14538

CVE-2025-11717

OPENSUSE-SU-2025:15645-1

Affected Products

Alt Linux

Firefox

References · 28

• https://mozilla.org/security/advisories/mfsa2025-81 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-81 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-11717 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11717 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11717 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15645-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-81/#CVE-2025-11717 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-11717 · Security Note
• https://bdu.fstec.ru/vul/2025-14538 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-11717 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-11721 · Note
• https://suse.com/security/cve/CVE-2025-11717 · Note
• https://suse.com/security/cve/CVE-2025-11709 · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1872601 · Note
• https://suse.com/security/cve/CVE-2025-11718 · Note