CVE-2025-10530: Spoofing issue in the WebAuthn component in Firefox for Android
Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunderbird 143.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 143 - Upgrade
Upgrade
Firefox for Androidto a version that resolves this vulnerability.Fixed in 143 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 143
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-10530?
CVE-2025-10530 is classified as a critical vulnerability in Firefox versions prior to 143.
How do I fix CVE-2025-10530?
To fix CVE-2025-10530, update Firefox to version 143 or later.
What type of vulnerability is CVE-2025-10530?
CVE-2025-10530 is a security vulnerability affecting the Firefox browser.
What versions of Firefox are affected by CVE-2025-10530?
CVE-2025-10530 affects all versions of Firefox prior to 143.
Is there a workaround for CVE-2025-10530?
There is no official workaround for CVE-2025-10530; updating to a secure version is recommended.