PT-2025-41906 · Mozilla · Firefox

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-11718

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144

Description A malicious webpage could create a fake address bar to deceive users when the address bar was hidden due to scrolling on Android devices. This occurred in response to a

visibilitychange

event.

Recommendations Update Firefox to version 144 or later.

Related Identifiers

CVE-2025-11718

Affected Products

Firefox

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-11718 · Security Note
• https://mozilla.org/security/advisories/mfsa2025-81 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1980808 · Note
• https://twitter.com/CVEnew/status/1978085823896555694 · Twitter Post