Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-9186 EUVD-2025-25242GHSA-96vc-phqg-v5rx

Spoofing issue in the Address Bar component of Firefox Focus for Android

Published Aug 19, 2025 · Updated Apr 13, 2026 · Assigned by mozilla

Description

Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.

Affected products

VendorProductAffectedFixed
Mozilla Firefox — 142

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 142.0.1-1.1 openSUSE-SU-2025:15516-1
openSUSE Tumbleweed firefox-esr 153.0-1.1 openSUSE-SU-2026:11373-1

Advisories 3

References