CVE-2025-10535: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143.

Affected products

• Mozilla Firefox: before 143.0 (fixed in 143.0)

Published 2025-09-16. Last modified 2026-10-05.