CVE-2025-9186: Spoofing issue in the Address Bar component of Firefox Focus for Android
Spoofing issue in the Address Bar component of Firefox Focus for Android.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 142 - Upgrade
Upgrade
Firefox Focus for Androidto a version that resolves this vulnerability.Fixed in 142
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-9186?
CVE-2025-9186 has a moderate severity level due to its potential to allow spoofing in the Address Bar component.
How do I fix CVE-2025-9186?
To fix CVE-2025-9186, update Firefox Focus to version 142 or later.
What impact does CVE-2025-9186 have on users?
CVE-2025-9186 could allow malicious websites to spoof trusted sites in the Address Bar, potentially leading to phishing attacks.
Which versions of Firefox Focus are affected by CVE-2025-9186?
CVE-2025-9186 affects all versions of Firefox Focus prior to version 142.
Is CVE-2025-9186 present in desktop versions of Firefox?
CVE-2025-9186 is specifically a vulnerability in the mobile version, Firefox Focus for Android, and does not affect desktop versions.