CVE-2025-1941: Lock screen setting bypass in Firefox Focus for Android
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed (distinct from CVE-2025-0245).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 136 - Upgrade
Upgrade
Firefox Focus for Androidto a version that resolves this vulnerability.Fixed in 136
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-1941?
CVE-2025-1941 has been classified as a moderate severity vulnerability.
How do I fix CVE-2025-1941?
To mitigate CVE-2025-1941, you should update Mozilla Firefox to the latest version beyond 136.
What systems are affected by CVE-2025-1941?
CVE-2025-1941 affects Mozilla Firefox versions up to and including 136.
What does CVE-2025-1941 exploit?
CVE-2025-1941 exploits a bypass of the user opt-in setting for authentication requirements in Focus.
Who is responsible for CVE-2025-1941?
CVE-2025-1941 has been identified and documented by Mozilla's security team.