CVE-2025-9186

MediumCVSS 6.5

Published: 19/08/2025(UTC)Updated: 30/09/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Firefox Focus for Android has a spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142.

A user could be tricked into believing they are on a trusted site, potentially leading to phishing of credentials or other sensitive information.

Update Firefox Focus for Android to version 142 or later to get the fix.

Original NVD description (English source)

Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS